Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.2A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size.Aug 5, 2022
- Critical9.8zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field.Aug 5, 2022
- High7.5A vulnerability found in gnutls.Aug 1, 2022
- High7.8The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss).Jul 29, 2022
- High7.5nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case o…Jul 27, 2022
- High8.8WebRTC Heap Buffer Overflow VulnerabilityKEVEPSS 70.5%Jul 27, 2022
- Medium5.5An issue was discovered in the Linux kernel through 5.18.14.Jul 27, 2022
- High7.8io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when executing IORING_OP.Jul 22, 2022
- High7.5In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled.Jul 20, 2022
- Medium6.7When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.Jul 18, 2022
- Medium5.9When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly.Jul 7, 2022
- Critical9.8When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name t…Jul 7, 2022
- Medium6.5curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms.Jul 7, 2022
- Medium4.3A malicious server can serve excessive amounts of headers in a HTTP response to curl and curl < 7.84.0 stores all of them.Jul 7, 2022
- Medium5.3AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances.Jul 5, 2022
- High7.8An issue was discovered in the Linux kernel through 5.18.9.Jul 4, 2022
- Medium5.5A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat…Jun 30, 2022
- Medium5.5A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c.Jun 30, 2022
- High7.3In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metac…Jun 21, 2022
- Medium5.5Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclos…Jun 15, 2022
- Medium5.5Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.Jun 15, 2022
- Medium5.5Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.Jun 15, 2022
- Low3.3The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used.Jun 5, 2022
- High7.8net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an inc…Jun 2, 2022
- High7.5libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously us…Jun 2, 2022