| CVE-2024-33599 | CAO8.1 | nscd: Stack-based buffer overflow in netgroup cache
If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted
by client requests then a subsequent client request for netgroup data
may result in a stack-based buffer overflow. This flaw was introduced
in glibc 2.15 when the cache was added to nscd.
This | 06/05/2024 |
| CVE-2024-2961 | CAO7.3 | The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. | 17/04/2024 |
| CVE-2024-29399 | CAO7.6 | An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code and escalate privileges via a crafted file to the upload.php component. | 11/04/2024 |
| CVE-2024-27632 | CAO8.8 | An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_header() function. | 08/04/2024 |
| CVE-2024-27631 | TRUNG BÌNH6.0 | Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via siteadmin/usergroup.php | 08/04/2024 |
| CVE-2024-27630 | CAO7.5 | Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary files via crafted input to the trackers_data_delete_file function. | 08/04/2024 |
| CVE-2024-2312 | TRUNG BÌNH6.7 | GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass. | 05/04/2024 |
| CVE-2023-39804 | TRUNG BÌNH6.2 | In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c. | 27/03/2024 |
| CVE-2024-30205 | CAO7.1 | In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23. | 25/03/2024 |
| CVE-2024-30204 | THẤP2.8 | In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments. | 25/03/2024 |
| CVE-2024-30203 | TRUNG BÌNH5.5 | In Emacs before 29.3, Gnus treats inline MIME contents as trusted. | 25/03/2024 |
| CVE-2024-30202 | CAO7.8 | In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23. | 25/03/2024 |
| CVE-2023-7207 | TRUNG BÌNH4.9 | Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames. | 29/02/2024 |
| CVE-2024-0911 | TRUNG BÌNH5.5 | A flaw was found in indent, a program for formatting C code. This issue may allow an attacker to trick a user into processing a specially crafted file to trigger a heap-based buffer overflow, causing the application to crash. | 06/02/2024 |
| CVE-2024-0684 | TRUNG BÌNH5.5 | A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service. | 06/02/2024 |
| CVE-2023-6780 | TRUNG BÌNH5.3 | An integer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message, resulting in undefi | 31/01/2024 |
| CVE-2023-6779 | CAO7.5 | An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INT_MAX bytes, leading to an incorrect calculation of the buffer size to s | 31/01/2024 |
| CVE-2023-6246 | CAO7.8 | A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ident argument set to NULL, and the program name (the basename of argv[0]) is bigger | 31/01/2024 |
| CVE-2024-0567 | CAO7.5 | A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack. | 16/01/2024 |
| CVE-2024-0553 | CAO7.5 | A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to | 16/01/2024 |