Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 193

Export CSV
CVE-2024-21989

Privilege Escalation Vulnerability in ONTAP Select Deploy administration utility

ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x are susceptible to a vulnerability which when successfully exploited could allow a read-only user to escalate their privileges.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Netapp
Products
Ontap Select Deploy Administration Utility
CVE-2023-38403

iperf3: memory allocation hazard and crash

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Apple Debian Es and 4 more
Products
Macos Debian Linux Iperf3 and 9 more
CVE-2022-48064

binutils: excessive memory consumption in _bfd_dwarf2_find_nearest_line_with_alt() in dwarf2.c

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Gnu Netapp
Products
Fedora Binutils Ontap Select Deploy Administration Utility
CVE-2022-39046

glibc: a crafted input may allow information disclosure

An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and prints it to the target log file, potentially revealing a portion of the contents of the heap.

CVSS 3.1 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Gnu Netapp
Products
Glibc H300s H300s Firmware and 9 more
CVE-2022-34903

gpg: Signature spoofing via status line injection

GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.

CVSS 3.1 · 6.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Debian Fedoraproject Gnupg and 2 more
Products
Debian Linux Fedora Gnupg and 3 more
CVE-2022-34526

libtiff: A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit

A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted TIFF file parsed by the "tiffsplit" or "tiffcrop" utilities.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Fedoraproject Libtiff and 1 more
Products
Debian Linux Fedora Libtiff and 2 more
CVE-2022-31676

open-vm-tools: local root privilege escalation in the virtual machine

VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Linux and 4 more
Products
Debian Linux Fedora Linux Kernel and 6 more
CVE-2022-2953

libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c

LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 48d6ece8.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Libtiff Netapp and 1 more
Products
Debian Linux Libtiff Ontap Select Deploy Administration Utility and 1 more
CVE-2022-1664

directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar

Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Debian Netapp
Products
Debian Linux Dpkg Ontap Select Deploy Administration Utility
CVE-2022-1623

libtiff: out-of-bounds read in LZWDecode

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Debian Fedoraproject Libtiff and 1 more
Products
Debian Linux Fedora Libtiff and 1 more
CVE-2022-1622

libtiff: out-of-bounds read in LZWDecode

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.

CVSS 3.1 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Apple Fedoraproject Libtiff and 1 more
Products
Iphone Os Macos Tvos and 4 more
CVE-2022-1587

pcre2: Out-of-bounds read in get_recurse_data_length in pcre2_jit_compile.c

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.

CVSS 3.1 · 9.1 Critical EPSS 2.8% KEV · Not listed
Vendors
Fedoraproject Netapp Pcre and 1 more
Products
Fedora Active Iq Unified Manager H300s and 14 more
CVE-2022-1355

libtiff: stack-buffer-overflow in tiffcp.c in main()

A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Libtiff and 2 more
Products
Debian Linux Fedora Libtiff and 2 more
CVE-2022-0924

libtiff: Out-of-bounds Read error in tiffcp

Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Debian Fedoraproject Libtiff and 2 more
Products
Debian Linux Fedora Libtiff and 2 more
CVE-2022-0909

tiff: Divide By Zero error in tiffcrop

Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Debian Fedoraproject Libtiff and 2 more
Products
Debian Linux Fedora Libtiff and 2 more
CVE-2022-0908

tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c

Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.

CVSS 3.1 · 7.7 High EPSS 1.2% KEV · Not listed
Vendors
Debian Fedoraproject Libtiff and 2 more
Products
Debian Linux Fedora Libtiff and 2 more
CVE-2022-0907

tiff: NULL Pointer Dereference in tiffcrop

Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Debian Fedoraproject Libtiff and 1 more
Products
Debian Linux Fedora Libtiff and 1 more
CVE-2022-0897

libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service

A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw allows a malicious, unprivileged user to exploit this issue via libvirt's API virConnectNumOfNWFilters to crash the network filter management daemon (libvirtd/virtnwfilterd).

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Netapp Redhat
Products
Ontap Select Deploy Administration Utility Enterprise Linux Libvirt