Open Source Vulnerabilities

wireshark

Memory handling issue in editcap could cause denial of service via crafted capture file

shadow

In shadow before 4

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Inappropriate implementation in input in Google Chrome prior to 96

shadow

In Shadow 4

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96

opensearch-dashboards-3-dashboards-observability, opensearch-dashboards-3-dashboards-observability

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Inappropriate implementation in navigation in Google Chrome prior to 96

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

java-postgresql-jdbc

PostgreSQL JDBC Driver (aka PgJDBC) before 42

qt5-qtwebengine

Insufficient policy enforcement in CORS in Google Chrome prior to 96

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

perl-image-exiftool

Improper neutralization of user data in the DjVu file format in ExifTool versions 7

java-postgresql-jdbc

pgjdbc is the offical PostgreSQL JDBC Driver

qt5-qtwebengine

Inappropriate implementation in referrer in Google Chrome prior to 96

xen, xen, xen

IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure

qt5-qtwebengine

Inappropriate implementation in WebAuthentication in Google Chrome prior to 96

perl-image-exiftool

lib/Image/ExifTool

java-postgresql-jdbc

PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, database independent Java code

xen, xen, xen

Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during node creation in an error path, resulting in a crash of x...

qt5-qtwebengine

Use after free in file API in Google Chrome prior to 96

java-postgresql-jdbc

pgjdbc is an open source postgresql JDBC Driver

xen, xen, xen

x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by moving the local APIC ...

qt5-qtwebengine

Heap buffer overflow in ANGLE in Google Chrome prior to 96

java-postgresql-jdbc

pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE

xen, xen, xen

insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode

qt5-qtwebengine

Insufficient data validation in loader in Google Chrome prior to 96

qt5-qtwebengine

Heap buffer overflow in BFCache in Google Chrome prior to 96

xen, xen, xen

Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions

nodetaint, protobuf-c

issue was discovered in GoGo Protobuf before 1

qt5-qtwebengine

Type confusion in V8 in Google Chrome prior to 96

xen, xen, xen

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure

rabbitmq-c

issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0

protobuf-c

Protobuf-c v1

qt5-qtwebengine

Out of bounds write in WebRTC in Google Chrome prior to 96

xen, xen, xen

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER

isync

flaw was found in mbsync before v1

barman

barman

barman

barman

qt5-qtwebengine

Insufficient data validation in Mojo in Google Chrome prior to 96

isync

flaw was found in mbsync before v1

xen, xen, xen

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Use after free in Swiftshader in Google Chrome prior to 96

isync

flaw was found in mbsync in isync 1

xen, xen, xen

Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

openfire

Openfire is an XMPP server licensed under the Open Source Apache License