Open Source Vulnerabilities

awstats

AWStats 7

webkit2gtk

type confusion issue was addressed with improved memory handling

libpcap

rpcapd/daemon

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68

webkit2gtk

WebKitGTK and WPE WebKit prior to version 2

nrpe

Nagios NRPE 3

libpcap

rpcapd/daemon

librewolf, librewolf, librewolf, librewolf, librewolf

logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different origin and removing focus from the input element

nrpe

Nagios NRPE 3

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

libpcap

command-line argument parser in tcpdump before 4

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website

ntfs-3g

integer underflow issue exists in ntfs-3g 2017

webkit2gtk

logic issue existed in the handling of document loads

librewolf, librewolf, librewolf, librewolf, librewolf

Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context

ntfs-3g

crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks

ntfs-3g

crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape

ntfs-3g

integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021

bison

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape

apr, apr-util

Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer

ntfs-3g

crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

bison

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER

libmspack

cabd_read_string function in mspack/cabd

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

race condition when running shutdown code for Web Worker led to a use-after-free vulnerability

ntfs-3g

file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G through 2021

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

libmspack

mspack/lzxd

bison

GNU Bison before 3

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

buffer overflow could occur when parsing and validating SCTP chunks in WebRTC

ntfs-3g

crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

libmspack

issue was discovered in mspack/chmd

live-media

OwnTone (aka owntone-server) through 28

ntfs-3g

invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers reported memory safety bugs present in Firefox 76

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

libmspack

issue was discovered in kwajd_read_headers in mspack/kwajd

live-media

Live555 through 1

ntfs-3g

ntfsck in NTFS-3G through 2021

librewolf, librewolf, librewolf, librewolf, librewolf

When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling