Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 26

Export CSV
CVE-2023-27537

curl: HSTS double-free

A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks, two threads sharing the same HSTS data could end up doing a double-free or use-after-free.

CVSS 3.1 · 5.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Broadcom Haxx Netapp and 1 more
Products
Brocade Fabric Operating System Firmware Libcurl Active Iq Unified Manager and 10 more
CVE-2023-27538

curl: SSH connection too eager reuse still

An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection.

CVSS 3.1 · 7.7 High EPSS 1.5% KEV · Not listed
Vendors
Broadcom Debian Fedoraproject and 4 more
Products
Brocade Fabric Operating System Firmware Debian Linux Fedora and 13 more
CVE-2023-27534

curl: SFTP path ~ resolving discrepancy

A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.

CVSS 3.1 · 8.8 High EPSS 2.4% KEV · Not listed
Vendors
Broadcom Fedoraproject Haxx and 3 more
Products
Brocade Fabric Operating System Firmware Fedora Curl and 12 more
CVE-2021-28153

glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink

An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)

CVSS 3.1 · 5.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Broadcom Debian Fedoraproject and 2 more
Products
Brocade Fabric Operating System Firmware Debian Linux Fedora and 2 more
CVE-2021-27219

glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Broadcom Debian Fedoraproject and 3 more
Products
Brocade Fabric Operating System Firmware Debian Linux Fedora and 12 more
CVE-2021-27218

glib: integer overflow in g_byte_array_new_take function when called with a buffer of 4GB or more on a 64-bit platform

An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.

CVSS 3.1 · 7.5 High EPSS 4.1% KEV · Not listed
Vendors
Broadcom Debian Fedoraproject and 3 more
Products
Brocade Fabric Operating System Firmware Debian Linux Fedora and 5 more
CVE-2020-35496

binutils: NULL pointer dereference in bfd_pef_scan_start_address function in bfd/pef.c

There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Broadcom Fedoraproject Gnu and 1 more
Products
Brocade Fabric Operating System Firmware Fedora Binutils and 6 more
CVE-2020-35495

binutils: NULL pointer dereference in bfd_pef_parse_symbols function in bfd/pef.c

There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34.

CVSS 3.1 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Broadcom Fedoraproject Gnu and 1 more
Products
Brocade Fabric Operating System Firmware Fedora Binutils and 6 more
CVE-2020-35494

binutils: usage of unitialized heap in tic4x_print_cond function in opcodes/tic4x-dis.c

There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34.

CVSS 3.1 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Broadcom Fedoraproject Gnu and 1 more
Products
Brocade Fabric Operating System Firmware Fedora Binutils and 6 more
CVE-2020-35493

binutils: heap-based buffer overflow in bfd_pef_parse_function_stubs function in bfd/pef.c via crafted PEF file

A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Broadcom Fedoraproject Gnu and 1 more
Products
Brocade Fabric Operating System Firmware Fedora Binutils and 6 more
CVE-2019-19054

kernel: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c allows attackers to cause a DoS

A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Broadcom Canonical Fedoraproject and 3 more
Products
Brocade Fabric Operating System Firmware Ubuntu Linux Fedora and 16 more
CVE-2021-20197

binutils: Race window allows users to own arbitrary files

There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Broadcom Gnu Netapp and 1 more
Products
Brocade Fabric Operating System Firmware Binutils Cloud Backup and 3 more
CVE-2021-4197

kernel: cgroup: Use open-time creds and namespace for migration perm checks

An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Broadcom Debian Linux and 3 more
Products
Brocade Fabric Operating System Firmware Debian Linux Linux Kernel and 13 more
CVE-2019-19063

kernel: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c allow for a DoS

Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption), aka CID-3f9361695113.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Broadcom Canonical Fedoraproject and 5 more
Products
Brocade Fabric Operating System Firmware Ubuntu Linux Fedora and 19 more