Open Source Vulnerabilities

qt5-qtwebengine

Insufficient policy enforcement in appcache in Google Chrome prior to 89

thunderbird, thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Session history navigations may have led to a use-after-free and potentially exploitable crash

rpm

flaw was found in RPM's hdrblobInit() in lib/header

mutt

Mutt before 2

wireshark

In Wireshark 2

qt5-qtwebengine

Data race in audio in Google Chrome prior to 89

librewolf, librewolf, librewolf, librewolf, librewolf

When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error

rpm

flaw was found in RPM's signature check functionality when reading a package file

wireshark

In Wireshark 2

mutt

rfc822

qt5-qtwebengine

Data race in audio in Google Chrome prior to 89

rpm

flaw was found in the RPM package in the read functionality

thunderbird, thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

iframe that was not permitted to run scripts could do so if the user clicked on a <code>javascript:</code> link

wireshark

In Wireshark 2

qt5-qtwebengine

Use after free in WebRTC in Google Chrome prior to 89

mutt

Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0

rpm

There is a flaw in RPM's signature functionality

thunderbird, thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution

wireshark

In Wireshark 2

qt5-qtwebengine

Heap buffer overflow in WebAudio in Google Chrome prior to 89

openvswitch

vulnerability was found in DPDK versions 18

rpm

It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102

wireshark

In Wireshark 2

qt5-qtwebengine

Use after free in Web Sockets in Google Chrome on Linux prior to 88

openvswitch

memory corruption issue was found in DPDK versions 17

rpm

symbolic link issue was found in rpm

librewolf, librewolf, librewolf, librewolf, librewolf

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed

wireshark

In Wireshark 2

qt5-qtwebengine

Heap buffer overflow in V8 in Google Chrome prior to 88

openvswitch

vulnerability was found in DPDK versions 18

rpm

race condition vulnerability was found in rpm

librewolf, librewolf, librewolf, librewolf, librewolf

When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected

qt5-qtwebengine

Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88

openvswitch

flaw was found in all dpdk version 17

ghostscript, wireshark

set_text_distance function in devices/vector/gdevpdts

librewolf, librewolf, librewolf, librewolf, librewolf

When visiting a website with an overly long URL, the user interface would start to hang

qt5-qtwebengine

Heap buffer overflow in Media in Google Chrome on Linux prior to 88

wireshark

In Wireshark 2

openvswitch

Buffer overflow in the lldp_decode function in daemon/protocols/lldp

librewolf, librewolf, librewolf, librewolf, librewolf

When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect

qt5-qtwebengine

Use after free in Downloads in Google Chrome on Windows prior to 88

wireshark

In Wireshark 2

librewolf, librewolf, librewolf, librewolf, librewolf

When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata

qt5-qtwebengine

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88

wireshark

In Wireshark 2

openvswitch

vulnerability was found in openvswitch

librewolf, librewolf, librewolf, librewolf, librewolf

When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system

wireshark

In Wireshark 2

openvswitch

Open vSwitch (aka openvswitch) 2