CVE Vulnerability Catalog

An arbitrary file write vulnerability in vRealize Operations Manager API prior to 8.4 allows an authenticated malicious actor with network access to write files to arbitrary locations on the underlying Photon OS.

Netty (io.netty:netty-codec-http2) before version 4.1.61.Final contains a vulnerability enabling request smuggling. The content-length header is not correctly validated if the request only uses a single Http2HeaderFrame with endStream set to true. This could lead to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1. This is a followup of GHSA-wm47-8v5p-wjpj/CVE-2021-21295 which missed to fix this one case. Fixed as part of 4.1.61.Final.

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension but includes a signature_algorithms_cert extension, a NULL pointer dereference will result, leading to a crash and denial of service. All OpenSSL 1.1.1 versions are affected; fixed in 1.1.1k.

A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.

XStream before 1.4.16 contains a vulnerability allowing a remote attacker to load and execute arbitrary code from a remote host by manipulating the processed input stream. Users with a whitelist of minimal types are not affected.

XStream before version 1.4.16 allows a remote attacker to execute arbitrary code by manipulating the processed input stream. Users who configured a whitelist of allowed types are not affected.

XStream before version 1.4.16 allows a remote attacker to request data from internal resources that are not publicly available by manipulating the processed input stream. Users who configured a whitelist of allowed types are not affected.

XStream before version 1.4.16 allows a remote attacker to occupy a thread that consumes maximum CPU time and will never return. Users who configured a whitelist of allowed types are not affected.

XStream before version 1.4.16 allows a remote attacker to load and execute arbitrary code from a remote host by manipulating the processed input stream. Users who configured a whitelist of allowed types are not affected.

XStream before 1.4.16 contains a vulnerability allowing a remote attacker to load and execute arbitrary code from a remote host by manipulating the processed input stream. Users with a whitelist of minimal types are not affected.

XStream before version 1.4.16 allows a remote attacker with sufficient rights to execute commands on the host by manipulating the processed input stream. Users who configured the security framework with a whitelist limited to the minimal required types are not affected.

XStream before 1.4.16 contains a vulnerability allowing a remote attacker to load and execute arbitrary code from a remote host by manipulating the processed input stream. Users with a whitelist of minimal types are not affected.

XStream before version 1.4.16 contains a vulnerability where the processed stream at unmarshalling time contains type information to recreate previously written objects. An attacker can manipulate the processed input stream and replace or inject objects, resulting in the deletion of a file on the local host.

XStream before version 1.4.16 contains a vulnerability where the processed stream at unmarshalling time contains type information to recreate previously written objects. An attacker can manipulate the processed input stream and replace or inject objects, resulting in a server-side request forgery.

In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly.

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory.