| CVE-2023-26157 | CAO7.5 | Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c. | 02/01/2024 |
| CVE-2023-5981 | TRUNG BÌNH5.9 | A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. | 28/11/2023 |
| CVE-2023-4949 | TRUNG BÌNH6.7 | An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.
| 10/11/2023 |
| CVE-2023-4693 | TRUNG BÌNH4.6 | An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, presenting | 25/10/2023 |
| CVE-2023-4692 | CAO7.8 | An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a result, arbitrary code exec | 25/10/2023 |
| CVE-2023-4911KEV | CAO7.8 | A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privil | 03/10/2023 |
| CVE-2023-4156 | CAO7.1 | A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information. | 25/09/2023 |
| CVE-2023-5156 | CAO7.5 | A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash. | 25/09/2023 |
| CVE-2023-4806 | TRUNG BÌNH5.9 | A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _n | 18/09/2023 |
| CVE-2023-4527 | TRUNG BÌNH6.5 | A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a cras | 18/09/2023 |
| CVE-2023-25588 | TRUNG BÌNH5.5 | A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of service. | 14/09/2023 |
| CVE-2023-25586 | TRUNG BÌNH5.5 | A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that can cause a crash and local denial of service. | 14/09/2023 |
| CVE-2023-25585 | TRUNG BÌNH5.5 | A flaw was found in Binutils. The use of an uninitialized field in the struct module *module may lead to application crash and local denial of service. | 14/09/2023 |
| CVE-2023-25584 | CAO7.1 | An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils. | 14/09/2023 |
| CVE-2023-4039 | TRUNG BÌNH4.8 | **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains
that target AArch64 allows an attacker to exploit an existing buffer
overflow in dynamically-sized local variables in your application
without this being detected. This stack-protector failure only applies
to C99-style dynamically-sized | 13/09/2023 |
| CVE-2023-4813 | TRUNG BÌNH5.9 | A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS= | 12/09/2023 |
| CVE-2022-48065 | TRUNG BÌNH5.5 | GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c. | 22/08/2023 |
| CVE-2022-48064 | TRUNG BÌNH5.5 | GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack. | 22/08/2023 |
| CVE-2022-48063 | TRUNG BÌNH5.5 | GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack. | 22/08/2023 |
| CVE-2022-47696 | CAO7.8 | An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols. | 22/08/2023 |