Open Source Vulnerabilities

xen, xen, xen

Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e

wireshark

Infinite loop in RTMPT protocol dissector in Wireshark 3

qt5-qtwebengine

Inappropriate implementation in Sandbox in Google Chrome prior to 94

xen, xen, xen

Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

wireshark

Large loops in multiple protocol dissectors in Wireshark 3

xen, xen, xen

Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

libxml2, qt5-qtwebengine

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2

wireshark

Crash in the PVFS protocol dissector in Wireshark 3

xen, xen, xen

Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision

libxml2, qt5-qtwebengine

flaw was found in libxml2

wireshark

Unaligned access in the CSN

xen, xen, xen

Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

wireshark

Crash in the CMS protocol dissector in Wireshark 3

qt5-qtwebengine

Heap buffer overflow in PDFium in Google Chrome prior to 95

xen, xen, xen

Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Use after free in Network APIs in Google Chrome prior to 95

wireshark

Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3

xen, xen, xen

Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations (e

qt5-qtwebengine

Out of bounds read in WebAudio in Google Chrome prior to 95

wireshark

ISO 15765 and ISO 10681 dissector crash in Wireshark 4

xen, xen, xen

Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid

qt5-qtwebengine

Use after free in PDF Accessibility in Google Chrome prior to 95

wireshark

RTPS dissector memory leak in Wireshark 4

xen, xen, xen

Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might need to allocate quite large amounts of memory temporarily

qt5-qtwebengine

Inappropriate implementation in V8 in Google Chrome prior to 95

wireshark

NetScreen file parser crash in Wireshark 4

xen, xen, xen

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as ...

qt5-qtwebengine

Inappropriate implementation in Blink in Google Chrome prior to 95

wireshark

SSH dissector crash in Wireshark 4

xen, xen, xen

XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit

qt5-qtwebengine

Insufficient validation of untrusted input Downloads in Google Chrome prior to 95

xen, xen, xen

lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path

wireshark

IEEE 1609

qt5-qtwebengine

Type confusion in V8 in Google Chrome prior to 95

xen, xen, xen

P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size

wireshark

GVCP dissector crash in Wireshark 4

qt5-qtwebengine

Use after free in loader in Google Chrome prior to 96

xen, xen, xen

Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e

wireshark

T

qt5-qtwebengine

Type confusion in V8 in Google Chrome prior to 96

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

shadow

Integer overflow in shadow 4

qt5-qtwebengine

Inappropriate implementation in cache in Google Chrome prior to 96

wireshark

Use after free issue in editcap could cause denial of service via crafted capture file

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Inappropriate implementation in service workers in Google Chrome prior to 96

wireshark

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4

shadow

race condition was found in util-linux before 2

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Type confusion in V8 in Google Chrome prior to 96