kernel: i2c: dev: copy userspace array safely

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

kernel: samples/bpf: syscall_tp_user: Fix array out-of-bound access

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

kernel: x86/signal: Detect and prevent an alternate signal stack overflow

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

kernel: net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

kernel: out-of-bounds read in pci_dev_for_each_resource()

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

libwebp: out-of-bounds write with a specially crafted WebP lossless file

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863.

kernel: rsvp: out-of-bounds read in rsvp_classify()

CVE-2023-39195 was found to be a duplicate of CVE-2023-42755. Please see https://access.redhat.com/security/cve/CVE-2023-42755 for more information.

libeconf: Stack overflow in function read_file at libeconf/lib/getfilecontents.c

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-22652. Reason: This record is a duplicate of CVE-2023-22652. Notes: All CVE users should reference CVE-2023-22652 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

libeconf: Stack overflow in function econf_writeFile at libeconf/lib/libeconf.c

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-32181. Reason: This record is a duplicate of CVE-2023-32181. Notes: All CVE users should reference CVE-2023-32181 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

binutils: objdump SEGV in concat_filename() at dwarf2.c:2060

This was deemed not a security vulnerability by upstream.

bison: Buffer overflow in src/symtab.c via crafted input file redefining the EOF token can lead to DoS

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

libarchive: heap-based buffer overflow in archive_read_support_format_lha.c due to insufficient validation of UTF-16 input

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it only affected a development version. Notes: none

exiv2: out of bounds read in IptcData::printStructure in iptc.c

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17724. Reason: This candidate is a reservation duplicate of CVE-2017-17724. Notes: All CVE users should reference CVE-2017-17724 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

exiv2: out-of-bounds read in Exiv2::IptcData::printStructure in image.cpp

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17724. Reason: This candidate is a reservation duplicate of CVE-2017-17724. Notes: All CVE users should reference CVE-2017-17724 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

R: local buffer overflow in GUI preferences

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-7576, CVE-2018-21233. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2018-7576 and CVE-2018-21233 to determine which ID is appropriate. All references and descriptions in this candidate have been removed to prevent accidental usage

kernel: Out-of-bounds read in drivers/usb/misc/yurex.c:yurex_read allows for DoS or potential code execution

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-16276. Reason: This candidate is a reservation duplicate of CVE-2018-16276. Notes: All CVE users should reference CVE-2018-16276 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

libtiff: NULL dereference in TIFFWriteBufferSetup in tif_write.c

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

libtiff: NULL dereference in TIFFRGBAImageOK in tif_getimage.c

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

libtiff: NULL dereference in unixErrorHandler in tif_unix.c

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none