Open Source Vulnerabilities

openssl1.1-compat

OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate

maddy

maddy is a composable, all-in-one mail server

vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9

grub

flaw was found in grub2 in versions prior to 2

thunderbird

When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list gateway, Thunderbird only considered t...

openssl1.1-compat

X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain

grub

flaw was found in grub2 in versions prior to 2

vim

Out-of-bounds Read in GitHub repository vim/vim prior to 9

synapse, openssl1.1-compat

OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client

grub

Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not inclu...

vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9

openssl1.1-compat

ASN

grub

GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already execut...

vim

Divide By Zero in GitHub repository vim/vim prior to 9

btcd

Lightning Network Daemon (lnd) is an implementation of a lightning bitcoin overlay network node

openssl1.1-compat

In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt()

grub

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed

vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9

grub

flaw was found in grub2 in versions prior to 2

nodetaint, forgejo

attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames

vim

NULL Pointer Dereference in GitHub repository vim/vim prior to 9

openssl1.1-compat

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances

grub

There is an issue with grub2 before version 2

vim

Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9

grub

There is an issue on grub2 before version 2

openssl1.1-compat

There is a type confusion vulnerability relating to X

vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9

grub

There's an issue with grub2 in all versions before 2

openssl1.1-compat

public API function BIO_new_NDEF is a helper function used for streaming ASN

vim

Divide By Zero in GitHub repository vim/vim prior to 9

grub

In grub2 versions before 2

openssl1.1-compat

function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e

vim

NULL Pointer Dereference in GitHub repository vim/vim prior to 9

grub

flaw was found in grub2, prior to version 2

openssl1.1-compat

timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack

vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9

grub

If certificates that signed grub are installed into db, grub can be booted directly

openssl1.1-compat

security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X

vim

Use After Free in GitHub repository vim/vim prior to 9

wazuh-dashboard-dashboards-maps-fips

wazuh-dashboard-dashboards-maps-fips

opensc

Various out of bounds reads when handling responses in OpenSC before 0

grub

crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap

openssl1.1-compat

Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks

vim

Use After Free in GitHub repository vim/vim prior to 9

freeradius

FreeRADIUS before 3

opensc

Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc

openssl1.1-compat

Issue summary: Checking excessively long DH keys or parameters may be very slow

vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9

freeradius

FreeRADIUS before 3