Open Source Vulnerabilities

xen, xen, xen

division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality

wireshark

Crash in DNP dissector in Wireshark 3

qt5-qtwebengine

Type confusion in Blink layout in Google Chrome prior to 93

xen, xen, xen

For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode

dbt-bigquery

dbt-bigquery

dbt-bigquery

wireshark

Crash in the Gryphon dissector in Wireshark 3

qt5-qtwebengine

Stack buffer overflow in ANGLE in Google Chrome prior to 93

element-desktop, element-desktop, cinny, cinny, cinny, cinny

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript

dbt-bigquery

xen, xen, xen

Arm provides multiple helpers to clean & invalidate the cache for a given region

wireshark

Infinite loop in the RTMPT dissector in Wireshark 3

qt5-qtwebengine

Use after free in Permissions in Google Chrome prior to 93

intel-ucode, intel-ucode, xen, xen, xen

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable ...

wireshark

Infinite loop in the BitTorrent DHT dissector in Wireshark 3

qt5-qtwebengine

Use after free in Indexed DB API in Google Chrome prior to 93

xen, xen, xen

side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction

wireshark

Crash in the RFC 7468 dissector in Wireshark 3

qt5-qtwebengine

Chromium: CVE-2021-30616 Use after free in Media

xen, xen, xen

Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 1508412 where software, under certain circumstances, could deadlock a core due to the execution of either a load to device or non-cacheable ...

wireshark

Crash in the Sysdig Event dissector in Wireshark 3

qt5-qtwebengine

Use after free in Performance Manager in Google Chrome prior to 94

wireshark

Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3

xen, xen, xen

issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information

qt5-qtwebengine

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94

wireshark

NULL pointer exception in the IEEE 802

xen, xen, xen

Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level,...

qt5-qtwebengine

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94

wireshark

Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3

xen, xen, xen

x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so cal...

qt5-qtwebengine

Incorrect security UI in Web Browser UI in Google Chrome prior to 94

wireshark

Buffer overflow in the Bluetooth SDP dissector in Wireshark 3

xen, xen, xen

x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late

qt5-qtwebengine

Out of bounds read in libjpeg-turbo in Google Chrome prior to 94

kibana-9.3

kibana-9.3

kibana-9.3

kibana-9.3

wireshark

Large loop in the Bluetooth DHT dissector in Wireshark 3

xen, xen, xen

x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Use after free in Portals in Google Chrome prior to 94

wireshark

Buffer overflow in the C12

xen, xen, xen

x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so calle...

qt5-qtwebengine

Use after free in V8 in Google Chrome prior to 94

wireshark

NULL pointer exception in the Modbus dissector in Wireshark 3

qt5-qtwebengine

Heap buffer overflow in Blink in Google Chrome prior to 94

xen, xen, xen

When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure

wireshark

NULL pointer exception in the IPPUSB dissector in Wireshark 3

qt5-qtwebengine

heap buffer overflow in WebRTC in Google Chrome prior to 94