Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,088

Export CSV
CVE-2024-49967

kernel: ext4: no need to continue when the number of entries is 1

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 7.1 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2023-29405

Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go

The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a "#cgo LDFLAGS" directive. Flags containing embedded spaces are mishandled, allowing disallowed flags to be smuggled through the LDFLAGS sanitization by including them in the argument of another flag. This only affects usage of the gccgo compiler.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Fedoraproject Golang Redhat
Products
Fedora Go Ceph Storage and 2 more
CVE-2023-29404

Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go

The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a "#cgo LDFLAGS" directive. The arguments for a number of flags which are non-optional are incorrectly considered optional, allowing disallowed flags to be smuggled through the LDFLAGS sanitization. This affects usage of both the gc and gccgo compilers.

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Fedoraproject Golang Redhat
Products
Fedora Go Ceph Storage and 2 more
CVE-2023-2455

postgresql: row security policies disregard user ID changes after inlining.

Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and a given query is planned under one role and then executed under other roles. This scenario can happen under security definer functions or when a common user and query is planned initially and then re-used across multiple SET ROLEs. Applying an incorrect policy may permit a user to complete otherwise-forbidden reads and modifications. This affects only databases that have used CREATE POLICY to define a row security policy.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Postgresql Redhat
Products
Fedora Postgresql Enterprise Linux and 6 more
CVE-2017-18017

kernel: netfilter: use-after-free in tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.

CVSS 3.1 · 9.8 Critical EPSS 52.8% KEV · Not listed
Vendors
Arista Canonical Debian and 6 more
Products
Eos Ubuntu Linux Debian Linux and 30 more
CVE-2018-20060

python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure

urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended hosts or transmitted in cleartext.

CVSS 3.0 · 9.8 Critical EPSS 4.5% KEV · Not listed
Vendors
Fedoraproject Python Redhat
Products
Fedora Urllib3 Ansible Tower and 1 more
CVE-2019-17546

libtiff: integer overflow leading to heap-based buffer overflow in tif_getimage.c

tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition.

CVSS 3.1 · 8.8 High EPSS 3.4% KEV · Not listed
Vendors
Libtiff Osgeo Redhat
Products
Libtiff Gdal Enterprise Linux
CVE-2024-36885

kernel: drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor()

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 4.4 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2024-35928

kernel: drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init()

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2024-26720

kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus
CVE-2024-8508

Unbounded name compression could lead to Denial of Service

NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that it needs to perform name compression for. Malicious upstreams responses with very large RRsets can cause Unbound to spend a considerable time applying name compression to downstream replies. This can lead to degraded performance and eventually denial of service in well orchestrated attacks. The vulnerability can be exploited by a malicious actor querying Unbound for the specially crafted contents of a malicious zone with very large RRsets. Before Unbound replies to the query it will try to apply name compression which was an unbounded operation that could lock the CPU until the whole packet was complete. Unbound version 1.21.1 introduces a hard limit on the number of name compression calculations it is willing to do per packet. Packets that need more compression will result in semi-compressed packets or truncated packets, even on TCP for huge messages, to avoid locking the CPU for long. This change should not affect normal DNS traffic.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Nlnetlabs Redhat
Products
Debian Linux Unbound Enterprise Linux and 2 more
CVE-2022-1949

389-ds-base: access control bypass by query (filter in LDAP terms) optimiser

An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
Fedora 389 Directory Server Directory Server and 1 more
CVE-2023-20584

kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity

IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Amd Redhat
Products
Epyc 7203 Epyc 7203 Firmware Epyc 7203p and 132 more