Open Source Vulnerabilities

qt5-qtwebengine

Use after free in Network APIs in Google Chrome prior to 95

wireshark

Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3

xen, xen, xen

Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations (e

qt5-qtwebengine

Out of bounds read in WebAudio in Google Chrome prior to 95

wireshark

ISO 15765 and ISO 10681 dissector crash in Wireshark 4

xen, xen, xen

Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid

qt5-qtwebengine

Use after free in PDF Accessibility in Google Chrome prior to 95

wireshark

RTPS dissector memory leak in Wireshark 4

xen, xen, xen

Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might need to allocate quite large amounts of memory temporarily

qt5-qtwebengine

Inappropriate implementation in V8 in Google Chrome prior to 95

wireshark

NetScreen file parser crash in Wireshark 4

xen, xen, xen

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as ...

qt5-qtwebengine

Inappropriate implementation in Blink in Google Chrome prior to 95

wireshark

SSH dissector crash in Wireshark 4

xen, xen, xen

XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit

qt5-qtwebengine

Insufficient validation of untrusted input Downloads in Google Chrome prior to 95

xen, xen, xen

lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path

wireshark

IEEE 1609

qt5-qtwebengine

Type confusion in V8 in Google Chrome prior to 95

xen, xen, xen

P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size

wireshark

GVCP dissector crash in Wireshark 4

qt5-qtwebengine

Use after free in loader in Google Chrome prior to 96

xen, xen, xen

Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e

wireshark

T

qt5-qtwebengine

Type confusion in V8 in Google Chrome prior to 96

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

shadow

Integer overflow in shadow 4

qt5-qtwebengine

Inappropriate implementation in cache in Google Chrome prior to 96

wireshark

Use after free issue in editcap could cause denial of service via crafted capture file

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Inappropriate implementation in service workers in Google Chrome prior to 96

wireshark

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4

shadow

race condition was found in util-linux before 2

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Type confusion in V8 in Google Chrome prior to 96

wireshark

Memory handling issue in editcap could cause denial of service via crafted capture file

shadow

In shadow before 4

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Inappropriate implementation in input in Google Chrome prior to 96

shadow

In Shadow 4

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96

opensearch-dashboards-3-dashboards-observability, opensearch-dashboards-3-dashboards-observability

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

qt5-qtwebengine

Inappropriate implementation in navigation in Google Chrome prior to 96

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

java-postgresql-jdbc

PostgreSQL JDBC Driver (aka PgJDBC) before 42

qt5-qtwebengine

Insufficient policy enforcement in CORS in Google Chrome prior to 96

xen, xen, xen

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

perl-image-exiftool

Improper neutralization of user data in the DjVu file format in ExifTool versions 7