Browse CVEs

MEDIUM 5.5 CVE-2022-47011 An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to… Binutils after 2.38 Fix from $1,6002023-08-22 MEDIUM 5.5 CVE-2020-26683 A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information. Mupdf Patch available Fix from $1,6002023-08-22 MEDIUM 5.5 CVE-2020-21490 An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembl… Binutils 2.34+ Fix from $1,6002023-08-22 MEDIUM 5.5 CVE-2020-19724 A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted comm… Binutils 2.34+ Fix from $1,6002023-08-22 HIGH 7.5 CVE-2023-32247 A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_SESSION_S… Linux Kernel 5.15.145 / 6.1.29+ Fix from $1,9502023-07-24 MEDIUM 5.5 CVE-2023-25399 A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disput… Scipy 1.10.0+ Fix from $1,6002023-07-05 MEDIUM 5.3 CVE-2023-34450 CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates it on many machines. An internal modific… Cometbft 0.34.29 / 0.37.2+ Fix from $1,6002023-07-03 HIGH 8.2 CVE-2023-34451 CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates it on many machines. The mempool maintai… Cometbft 0.34.29 / 0.37.2+ Fix from $1,9502023-07-03 MEDIUM 6.5 CVE-2023-2683 A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate c… Bluetooth Low Energy Software Development Kit after 5.1.1 Fix from $1,6002023-06-15 MEDIUM 6.5 CVE-2023-33460 There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash. Fedora Patch available Fix from $1,6002023-06-06 MEDIUM 5.5 CVE-2023-33717 mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch exceptions thr… Mp4v2 No fix yet Fix from $1,6002023-06-02 MEDIUM 5.5 CVE-2023-33716 mp4v2 v2.1.3 was discovered to contain a memory leak via the class MP4StringProperty at mp4property.cpp. Mp4v2 Mitigation only Fix from $1,6002023-06-01 MEDIUM 5.5 CVE-2023-33719 mp4v2 v2.1.3 was discovered to contain a memory leak via MP4SdpAtom::Read() at atom_sdp.cpp Mp4v2 No fix yet Fix from $1,6002023-06-01 HIGH 8.8 CVE-2023-33718 mp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString() at mp4file_io.cpp Mp4v2 Patch available Fix from $1,9502023-05-31 HIGH 7.5 CVE-2023-31517 A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) via opening a crafted file. Teeworlds Mitigation only Fix from $1,9502023-05-23 MEDIUM 5.5 CVE-2023-2700 A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory… Libvirt Patch available Fix from $1,6002023-05-15 HIGH 7.5 CVE-2023-2618 A vulnerability, which was classified as problematic, has been found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this issue is the functi… Opencv 4.8.0+ Fix from $1,9502023-05-10 HIGH 7.8 CVE-2021-31240 An issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the parseSWF_IMPORTASSETS function in the parser.c file. Libming No fix yet Fix from $1,9502023-05-09 MEDIUM 5.5 CVE-2023-31973 yasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third parties dispute t… Yasm No fix yet Fix from $1,6002023-05-09 HIGH 7.5 CVE-2023-29163 When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate.… Big Ip Access Policy Manager 14.1.5.4 / 15.1.8.2+ Fix from $1,9502023-05-03 HIGH 7.8 CVE-2023-21666 Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool. Wcn3998 Firmware Patch available Fix from $1,9502023-05-02 HIGH 7.5 CVE-2023-28982 A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved a… Junos Mitigation only Fix from $1,9502023-04-17 HIGH 7.5 CVE-2023-30637 Baidu braft 1.1.2 has a memory leak related to use of the new operator in example/atomic/atomic_server. NOTE: installations with brpc-0.14.0 and late… Braft No fix yet Fix from $1,9502023-04-13 HIGH 7.5 CVE-2023-24511 On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. This may resu… Eos 4.26.10m / 4.27.9m+ Fix from $1,9502023-04-12 MEDIUM 5.5 CVE-2023-1074 A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a user starts a malicious networki… Linux Kernel Patch available Fix from $1,6002023-03-27 HIGH 7.5 CVE-2023-28096 OpenSIPS, a Session Initiation Protocol (SIP) server implementation, has a memory leak starting in the 2.3 branch and priot to versions 3.1.8 and 3.2… Opensips 3.1.8 / 3.2.5+ Fix from $1,9502023-03-15 HIGH 7.5 CVE-2023-26257 An issue was discovered in the Connected Vehicle Systems Alliance (COVESA; formerly GENIVI) dlt-daemon through 2.18.8. Dynamic memory is not released… Dlt Daemon after 2.18.8 Fix from $1,9502023-02-27 MEDIUM 5.5 CVE-2023-23205 An issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C/examples/multi_client_server/multi_client_server.c. Lib60870 No fix yet Fix from $1,6002023-02-24 MEDIUM 6.5 CVE-2023-20089 A vulnerability in the Link Layer Discovery Protocol (LLDP) feature for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure… Nx Os Mitigation only Fix from $1,6002023-02-23 MEDIUM 5.5 CVE-2023-0597 A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess location o… Linux Kernel Patch available Fix from $1,6002023-02-23