Open Source Vulnerabilities

kea

missing check on incoming client requests can be exploited to cause a situation where the Kea server's lease storage contains leases which are rejected as invalid when the server tries to load leas...

subversion

Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules

qt5-qtwebengine

Use after free in PDF in Google Chrome prior to 105

xen, xen, xen

issue was discovered in Xen through 4

radare2

In radare2 before 3

kea

invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process (kea-dhcp4), causing the server process to exit

qt5-qtwebengine

Use after free in PDF in Google Chrome prior to 105

xen, xen, xen

issue was discovered in Xen through 4

radare2

radare2 through 4

kea

packet containing a malformed DUID can cause the Kea DHCPv6 server process (kea-dhcp6) to exit due to an assertion failure

qt5-qtwebengine

Use after free in PDF in Google Chrome prior to 105

xen, xen, xen

issue was discovered in Xen through 4

poppler

flaw was found in Poppler in the way certain PDF files were converted into HTML

radare2

In radare2 through 4

libressl

LibreSSL 2

qt5-qtwebengine

Insufficient data validation in Mojo in Google Chrome prior to 105

xen, xen, xen

issue was discovered in Xen through 4

poppler

JPXStream::init function in Poppler 0

radare2

segmentation fault was discovered in radare2 with adf command

qt5-qtwebengine

Use after free in WebSQL in Google Chrome prior to 105

xen, xen, xen

issue was discovered in Xen through 4

nodejs-current

previously disclosed vulnerability (CVE-2023-30584) was patched insufficiently in commit 205f1e6

radare2

double free issue was discovered in radare2 in cmd_info

qt5-qtwebengine

Use after free in Layout in Google Chrome prior to 105

libressl

During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client

xen, xen, xen

issue was discovered in Xen through 4

nodejs-current

Various `node:fs` functions allow specifying paths as either strings or `Uint8Array` objects

radare2

off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java

qt5-qtwebengine

Use after free in Network Service in Google Chrome prior to 105

xen, xen, xen

issue was discovered in Xen through 4

openssl1.1-compat, libressl

X

qt5-qtwebengine

Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107

radare2

In radare2 before version 4

xen, xen, xen

issue was discovered in Xen 4

qt5-qtwebengine

Type confusion in V8 in Google Chrome prior to 107

nodejs-23, nodejs-current

attacker can make the Node

radare2

radare2 4

xen, xen, xen

issue was discovered in Xen through 4

qt5-qtwebengine

Use after free in Web Workers in Google Chrome prior to 107

nodejs-23, nodejs-current

team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling

radare2

radare2 4

tcpflow

issue was discovered in wifipcap/wifipcap

qemu, xen, xen, xen

out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5

open-vm-tools, open-vm-tools, open-vm-tools

VMware Tools (12

qt5-qtwebengine

Use after free in V8 in Google Chrome prior to 107

radare2

In radare2 through 5

tcpflow

stack-based buffer over-read exists in setbit() at iptree

open-vm-tools, open-vm-tools, open-vm-tools

fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine

xen, xen, xen

issue was discovered in Xen through 4

qt5-qtwebengine

Use after free in Skia in Google Chrome prior to 106