CVE Vulnerability Catalog

Next.js to framework React do budowania aplikacji webowych typu full-stack. W wersjach od 12.2.0 do przed 15.5.16 oraz 16.2.5, zewnętrzny klient mógł wysłać nagłówek x-nextjs-data w normalnym żądaniu do ścieżki obsługiwanej przez middleware, która zwracała przekierowanie.

W aplikacji przetwarzającej źle sformatowany plik PKCS#12 może wystąpić dereferencja nieprawidłowego lub pustego wskaźnika. Może to prowadzić do awarii aplikacji.

A vulnerability has been identified in the Linux kernel related to improper reference counting management in the 'xfrm_state' structure. The issue occurs during the NETDEV_UNREGISTER event, leading to reference count leaks.

A vulnerability has been identified in the Linux kernel that leads to a memory leak in the atomic_destroy_state function. After several commits, slab memory increases as some drm_crtc_commit objects are not freed.

A vulnerability has been identified in the Linux kernel affecting the media: solo6x10 component. The issue was a lack of checks to ensure that the chip_id does not exceed the allowed range.

A vulnerability has been identified in the Linux kernel related to the sticky mode in the SQ manager. This issue can lead to stalls when multiple SQs share an SMQ and transmit concurrently.

A vulnerability related to NULL pointer dereference in the ASoC: SOF: Intel: hda module has been fixed in the Linux kernel. The issue occurs when there is a mismatch between the DAI links in the machine driver and the topology, potentially leading to the playback/capture widget not being set, especially in loopback scenarios.

A vulnerability in the Linux kernel related to the lack of error checking for the kcalloc() function in parse_thread_groups() has been resolved. The absence of this check could lead to a NULL pointer dereference.

The ifconfig command in Linux kernel 2.2 and later does not report when the network interface is in promiscuous mode if it was enabled using PACKET_MR_PROMISC. This could allow attackers to sniff network traffic undetected.

A vulnerability has been identified in the Linux kernel related to manipulating the 'mfd_of_node_list'. A mutex has been added to ensure safety during access and modification of this list, preventing potential crashes.

A vulnerability in the Linux kernel related to unsound scalar forking in maybe_fork_scalars() for BPF_OR has been fixed. The issue occurred when the source operand was a constant and the dst range was signed in the range [-1, 0].

A vulnerability has been identified in the Linux kernel related to the missing resource unmapping in the snd_cx23885_hw_params() function. An error path has been added to call cx23885_alsa_dma_unmap() to release resources acquired by cx23885_alsa_dma_map().

A vulnerability in the Linux kernel has been resolved in rnbd-srv, related to not zeroing the rsp buffer before use. Failure to zero the buffer could lead to unintended data being sent to the client.

A vulnerability has been identified in the Linux kernel related to the handling of fake USB devices that can send their own report descriptors. If the input_mapping() hook is not called, the pm->input_ep82 pointer remains NULL, leading to a system crash.

In the Linux kernel, a vulnerability related to dm-verity has been resolved, which incorrectly handled errors in the dm_bufio_client_create() function. If the call to this function fails, dm_bufio_client_destroy() is later called with an ERR_PTR() argument.

A vulnerability has been identified in the Linux kernel within the wifi: libertas module, which has been resolved. The usb_tx_block() function submits cardp->tx_urb without ensuring that any previous transmission on this URB has completed.

The faraday-http-cache library stores cached responses in JSON format by default and reads them back using JSON.load, which honors the json_class key and calls json_create on the named class. Response headers are stored verbatim in the cache entry, so a malicious origin server can return a response with a json_class key leading to unsafe deserialization.

Out-of-bounds write in Intel PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Improper input validation in Intel PROSet/Wireless WiFi software before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

The vulnerability in BusyBox affects the write_status_file() function in the dpkg tool. Failure to reset a stale field cursor between package stanzas leads to out-of-bounds reads and corruption of the status file when removing multiple packages.