Browse CVEs

MEDIUM 5.9 CVE-2022-43594 Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially cra… Debian Linux No fix yet Fix from $1,6002022-12-22 MEDIUM 5.9 CVE-2022-43595 Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially cra… Debian Linux No fix yet Fix from $1,6002022-12-22 MEDIUM 5.9 CVE-2022-43596 An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A spe… Debian Linux No fix yet Fix from $1,6002022-12-22 MEDIUM 5.9 CVE-2022-43603 A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted I… Debian Linux No fix yet Fix from $1,6002022-12-22 CRITICAL 9.8 CVE-2022-41794 A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file ca… Debian Linux No fix yet Fix from $2,3002022-12-22 CRITICAL 9.8 CVE-2022-41837 An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Spec… Debian Linux No fix yet Fix from $2,3002022-12-22 CRITICAL 9.8 CVE-2022-41838 A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially-crafted .dds… Debian Linux No fix yet Fix from $2,3002022-12-22 HIGH 8.1 CVE-2022-41981 A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-crafted targa file can lead to… Debian Linux No fix yet Fix from $1,9502022-12-22 HIGH 7.5 CVE-2022-41988 An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A sp… Debian Linux No fix yet Fix from $1,9502022-12-22 CRITICAL 9.8 CVE-2022-41639 A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A s… Debian Linux No fix yet Fix from $2,3002022-12-22 CRITICAL 9.1 CVE-2022-41649 A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted T… Debian Linux No fix yet Fix from $2,3002022-12-22 MEDIUM 5.3 CVE-2022-36354 A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in th… Debian Linux No fix yet Fix from $1,6002022-12-22 CRITICAL 9.8 CVE-2022-47629 Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. Debian Linux 1.6.3+ Fix from $2,3002022-12-20 HIGH 7.8 CVE-2022-4515 A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified i… Debian Linux No fix yet Fix from $1,9502022-12-20 CRITICAL 9.8 CVE-2022-23537 PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, S… Debian Linux 2.13.1+ Fix from $2,3002022-12-20 HIGH 7.5 CVE-2022-3109 An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() and will cau… Debian Linux 5.0.3+ Fix from $1,9502022-12-16 MEDIUM 6.1 CVE-2022-23527 mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server. Versions prior to 2.4.12.2 are vulne… Debian Linux 2.4.12.2+ Fix from $1,6002022-12-14 HIGH 7.5 CVE-2022-45685 A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data. Debian Linux 1.5.2+ Fix from $1,9502022-12-13 HIGH 7.5 CVE-2022-45693 Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Ser… Debian Linux 1.5.2+ Fix from $1,9502022-12-13 MEDIUM 6.5 CVE-2022-41915 Netty project is an event-driven asynchronous network application framework. Starting in version 4.1.83.Final and prior to 4.1.86.Final, when calling… Debian Linux 4.1.86+ Fix from $1,6002022-12-13 HIGH 7.5 CVE-2022-41881 Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised wh… Debian Linux 4.1.86+ Fix from $1,9502022-12-12 CRITICAL 9.8 CVE-2022-23484 xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 cont… Debian Linux 0.9.21+ Fix from $2,3002022-12-09 CRITICAL 9.1 CVE-2022-23493 xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 cont… Debian Linux 0.9.21+ Fix from $2,3002022-12-09 CRITICAL 9.1 CVE-2022-23481 xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 cont… Debian Linux 0.9.21+ Fix from $2,3002022-12-09 CRITICAL 9.1 CVE-2022-23482 xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 cont… Debian Linux 0.9.21+ Fix from $2,3002022-12-09 CRITICAL 9.1 CVE-2022-23483 xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 cont… Debian Linux 0.9.21+ Fix from $2,3002022-12-09 CRITICAL 9.8 CVE-2022-23480 xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 cont… Debian Linux 0.9.21+ Fix from $2,3002022-12-09 CRITICAL 9.8 CVE-2022-23478 xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 cont… Debian Linux 0.9.21+ Fix from $2,3002022-12-09 CRITICAL 9.8 CVE-2022-23479 xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 cont… Debian Linux 0.9.21+ Fix from $2,3002022-12-09 CRITICAL 9.8 CVE-2022-23468 xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). xrdp < v0.9.21 cont… Debian Linux 0.9.21+ Fix from $2,3002022-12-09