CVE Vulnerability Catalog

A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position.

libcurl accidentally skips certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks.

The compose-go library component in versions v2.10-v2.4.0 allows an authorized user who sends malicious YAML payloads to cause excessive memory and CPU consumption while parsing YAML, as used by Docker Compose from versions v2.27.0 to v2.29.7.

Unclear documentation of error behavior in `ParseWithClaims` in golang-jwt can lead to users not checking errors properly. Especially, if a token is both expired and invalid, the returned errors may be misleading.

A vulnerability has been identified in the Linux kernel related to the ocfs2 filesystem, concerning the incorrect handling of the 'last' pointer in the context of preserving xattr entries. This issue has been partially addressed, but bugs still exist in the cleanup process.

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authorization bypass vulnerability in the VerifyTimestampResponse function.

A vulnerability has been identified in the Linux kernel within the rockchip module that may lead to ERR_PTR dereference in the rga_buf_init() function. The issue occurs when rga_get_frame() returns ERR_PTR(-EINVAL) due to an unsupported or invalid buffer type.

A vulnerability has been identified in the Linux kernel related to the btree repair functions for free space and inode. The issue involves a lack of checking for deleted cursors when revalidating two btrees, which may lead to filesystem malfunctions.

In the Linux kernel, a vulnerability related to dm-verity has been resolved, which incorrectly handled errors in the dm_bufio_client_create() function. If the call to this function fails, dm_bufio_client_destroy() is later called with an ERR_PTR() argument.

A vulnerability in the Linux kernel has been resolved in rnbd-srv, related to not zeroing the rsp buffer before use. Failure to zero the buffer could lead to unintended data being sent to the client.

In the Linux kernel, a vulnerability related to a reference leak in mtk_mdp_remove() has been fixed. The issue was resolved by adding platform_device_put() to prevent the reference leak.

A vulnerability in the Linux kernel related to unsound scalar forking in maybe_fork_scalars() for BPF_OR has been fixed. The issue occurred when the source operand was a constant and the dst range was signed in the range [-1, 0].

A vulnerability in the Linux kernel related to the IOMMU mechanism has been resolved, concerning flushing dev-IOTLB only when the PCIe device is accessible in scalable mode.

A vulnerability related to the tile info buffer size in the AV1 module for Verisilicon has been fixed in the Linux kernel. The issue involved incorrect memory allocation for tile information, which could lead to operational errors.

A vulnerability exists in the nodemailer package (npm) affecting versions from 2.7.2 to 10.0.1. Details are not fully described in the provided snippet, but vulnerable versions are confirmed.

A vulnerability has been identified in the Linux kernel related to the missing resource unmapping in the snd_cx23885_hw_params() function. An error path has been added to call cx23885_alsa_dma_unmap() to release resources acquired by cx23885_alsa_dma_map().

A vulnerability related to sync handling in amdgpu has been resolved in the Linux kernel. Invalidating a dmabuf can impact other users of the shared buffer object (BO).

In the Linux kernel, a null pointer dereference occurs due to a race between smmu driver probe and client driver probe, when of_dma_configure() for client is called after the iommu_device_re.

A vulnerability related to NULL pointer dereference in the ASoC: SOF: Intel: hda module has been fixed in the Linux kernel. The issue occurs when there is a mismatch between the DAI links in the machine driver and the topology, potentially leading to the playback/capture widget not being set, especially in loopback scenarios.

A vulnerability in the Linux kernel related to the lack of error checking for the kcalloc() function in parse_thread_groups() has been resolved. The absence of this check could lead to a NULL pointer dereference.