List of all vulnerabilities

Report a vulnerability
CVE-2023-25585 – Field `file_table` of `struct module *module` is uninitialized
9/14/2023
Affected packages: bap-std • clangml • conf-binutils
Medium severity
CVE-2023-25586 – Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized
9/14/2023
Affected packages: bap-std • clangml • conf-binutils
Medium severity
CVE-2023-25588 – Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`
9/14/2023
Affected packages: bap-std • clangml • conf-binutils
Medium severity
CVE-2023-32636
9/14/2023
Affected packages: conf-glib-2
Medium severity
CVE-2023-32643
9/14/2023
Affected packages: conf-glib-2
Medium severity
CVE-2023-32611 – G_variant_byteswap() can take a long time with some non-normal inputs
9/14/2023
Affected packages: conf-glib-2
Medium severity
CVE-2023-29499 – Gvariant offset table entry size is not checked in is_normal()
9/14/2023
Affected packages: conf-glib-2
Medium severity
CVE-2023-32665 – Gvariant deserialisation does not match spec for non-normal data
9/14/2023
Affected packages: conf-glib-2
Medium severity
CVE-2023-3255 – Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service
9/13/2023
Affected packages: conf-qemu-img • nbd-tool
Medium severity
CVE-2023-3301 – Triggerable assertion due to race condition in hot-unplug
9/13/2023
Affected packages: conf-qemu-img • nbd-tool
Medium severity
CVE-2023-4039 – GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64
9/13/2023
Affected packages: conf-aarch64-linux-gnu-gcc • conf-blas • conf-c++ • conf-g++ • conf-gcc • conf-gfortran • conf-lapack • conf-libgccjit • conf-mingw-w64-gcc-i686 • conf-mingw-w64-gcc-x86_64 ... (20)
Medium severity
CVE-2023-4813 – Glibc: potential use-after-free in gaih_inet()
9/12/2023
Affected packages: gettext-stub
Medium severity
CVE-2023-4921 – Use-after-free in Linux kernel's net/sched: sch_qfq component
9/12/2023
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
High severity
CVE-2023-32558
9/12/2023
Affected packages: conf-npm
Unknown severity
CVE-2023-32005
9/12/2023
Affected packages: conf-npm
Medium severity
CVE-2023-42467
9/11/2023
Affected packages: conf-qemu-img • nbd-tool
Unknown severity
CVE-2023-4807 – POLY1305 MAC implementation corrupts XMM registers on Windows
9/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
High severity
CVE-2023-40397
9/6/2023
Affected packages: javascriptcore
Unknown severity
CVE-2023-4623 – Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component
9/6/2023
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
High severity
CVE-2023-4622 – Use-after-free in Linux kernel's af_unix component
9/6/2023
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (27)
High severity