Open Source Vulnerabilities

xen, xen, xen

arm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm (p2m_remove_mapping, guest_physmap_remove_page, and p2m_se...

rsyslog

Rsyslog is a rocket-fast system for log processing

qt5-qtwebengine

Heap buffer overflow in Task Manager in Google Chrome prior to 97

xen, xen, xen

issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Use after free in Web Search in Google Chrome prior to 98

xen, xen, xen

issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Use after free in Screen Capture in Google Chrome prior to 98

xen, xen, xen

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

darkhttpd

flaw was found in darkhttpd

qt5-qtwebengine

Use after free in Window Dialogue in Google Chrome prior to 98

xen, xen, xen

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

darkhttpd

darkhttpd through 1

qt5-qtwebengine

Policy bypass in COOP in Google Chrome prior to 98

xen, xen, xen

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

darkhttpd

darkhttpd before 1

qt5-qtwebengine

Use after free in ANGLE in Google Chrome prior to 98

xen, xen, xen

certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address translation control structures (page tables) may (and, on suitable hardware, by default will) be shared be...

qt5-qtwebengine

Use after free in GPU in Google Chrome prior to 98

xen, xen, xen

grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain Xen-owned pages of memory

libx11

issue was discovered in libX11 through 1

qt5-qtwebengine

Integer overflow in Mojo in Google Chrome prior to 98

xen, xen, xen

PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR")

libx11

issue was discovered in libX11 through 1

qt5-qtwebengine

Use after free in Animation in Google Chrome prior to 98

xen, xen, xen

Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory

libx11

issue was discovered in XListExtensions in ListExt

nsd

NLnet Labs Unbound, up to and including version 1

qt5-qtwebengine

Inappropriate implementation in Gamepad API in Google Chrome prior to 98

xen, xen, xen

xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged domains directly from Xen

libx11

integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1

qt5-qtwebengine

Expat (aka libexpat) before 2

xen, xen, xen

inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status

libx11

integer overflow vulnerability leading to a double-free was found in libX11

qt5-qtwebengine

Use after free in Blink Layout in Google Chrome on Android prior to 99

xen, xen, xen

long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains

libx11

LookupCol

hylafaxplus

HylaFAX+ through 7

qt5-qtwebengine

Type confusion in V8 in Google Chrome prior to 99

xen, xen, xen

grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory

hylafaxplus

In HylaFAX+ through 7

libx11

vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function

qt5-qtwebengine

Out of bounds memory access in Mojo in Google Chrome prior to 99

xen, xen, xen

IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

libx11

vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function

qt5-qtwebengine

Use after free in ANGLE in Google Chrome prior to 99

xen, xen, xen

IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

libx11

vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function

qt5-qtwebengine

Use after free in Portals in Google Chrome prior to 100

xen, xen, xen

IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Inappropriate implementation in Web Cursor in Google Chrome prior to 100