Open Source Vulnerabilities

dropbear

recv_msg_userauth_request function in svr-auth

py3-waitress

Waitress is a Web Server Gateway Interface server for Python 2 and 3

vim

Use After Free in GitHub repository vim/vim prior to 9

openssh, dropbear

In OpenSSH 7

vim

NULL Pointer Dereference in GitHub repository vim/vim prior to 9

vim

Use After Free in GitHub repository vim/vim prior to 9

saf, saf

xterm

xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence

vim

NULL Pointer Dereference in GitHub repository vim/vim prior to 9

xterm

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel

openssl1.1-compat

ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation

vim

Use After Free in GitHub repository vim/vim prior to 9

vim

Use After Free in GitHub repository vim/vim prior to 9

openssl1.1-compat

In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can rec...

vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9

openssl1.1-compat

OpenSSL 1

cri-o

vulnerability was found in cri-o

vim

Use After Free in GitHub repository vim/vim prior to 9

openssl1.1-compat

Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths

airflow-2

cri-o

vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API

airflow-2

airflow-2

airflow-2

vim

vulnerability was found in vim and classified as problematic

openssl1.1-compat

There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli

airflow-2

airflow-2

airflow-2

airflow-2

cri-o

flaw was found in CRI-O in the way it set kernel options for a pod

vim

null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11

openssl1.1-compat

Server or client applications that call the SSL_check_chain() function during or after a TLS 1

py3-jwcrypto

vulnerability was found in JWCrypto

vim

Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9

grub

flaw was found in grub2 in versions prior to 2

rke

security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster

vim

Use After Free in GitHub repository vim/vim prior to 9

grub

flaw was found in grub2 in versions prior to 2

thunderbird

Thunderbird unexpectedly enabled JavaScript in the composition area

openssl1.1-compat

OpenSSL 1

vitess-24, vitess-24

vitess-24, vitess-24

vim

Heap based buffer overflow in vim/vim 9

thunderbird

Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safety bugs present in Firefox 94

grub

flaw was found in grub2 in versions prior to 2

openssl1.1-compat

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an int...

vim

Out-of-bounds Write in GitHub repository vim/vim prior to 9

grub

flaw was found in grub2 in versions prior to 2

thunderbird

olm_session_describe function in Matrix libolm before 3