Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 144 of 430.
- CVE-2023-54065 net: dsa: realtek: fix out-of-bounds access
- CVE-2023-54064 ipmi:ssif: Fix a memory leak when scanning for an adapter
- CVE-2023-54063 fs/ntfs3: Fix OOB read in indx_insert_into_buffer
- CVE-2023-54062 ext4: fix invalid free tracking in ext4_xattr_move_to_block()
- CVE-2023-54060 iommufd: Set end correctly when doing batch carry
- CVE-2023-5406 Memory corruption in Experion Server
- CVE-2023-54059 soc: mediatek: mtk-svs: Enable the IRQ later
- CVE-2023-54058 firmware: arm_ffa: Check if ffa_driver remove is present before executing
- CVE-2023-54057 iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
- CVE-2023-54056 kheaders: Use array declaration instead of char
- CVE-2023-54055 RDMA/irdma: Fix memory leak of PBLE objects
- CVE-2023-54053 wifi: iwlwifi: pcie: fix possible NULL pointer dereference
- CVE-2023-54052 wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU
- CVE-2023-54051 net: do not allow gso_size to be set to GSO_BY_FRAGS
- CVE-2023-54050 ubifs: Fix memleak when insert_old_idx() failed
- CVE-2023-5405 Information disclosure in Experion Server
- CVE-2023-54049 rpmsg: glink: Add check for kstrdup
- CVE-2023-54048 RDMA/bnxt_re: Prevent handling any completions after qp destroy
- CVE-2023-54047 drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
- CVE-2023-54046 crypto: essiv - Handle EBUSY correctly
- CVE-2023-54045 audit: fix possible soft lockup in __audit_inode_child()
- CVE-2023-54044 spmi: Add a check for remove callback when removing a SPMI driver
- CVE-2023-54043 iommufd: Do not add the same hwpt to the ioas->hwpt_list twice
- CVE-2023-54042 powerpc/64s: Fix VAS mm use after free
- CVE-2023-54041 io_uring: fix memory leak when removing provided buffers
- CVE-2023-54040 ice: fix wrong fallback logic for FDIR
- CVE-2023-5404 Memory corruption in Experion Server
- CVE-2023-54039 can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access
- CVE-2023-54038 Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link
- CVE-2023-54037 ice: prevent NULL pointer deref during reload
- CVE-2023-54036 wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU
- CVE-2023-54035 netfilter: nf_tables: fix underflow in chain reference counter
- CVE-2023-54034 iommufd: Make sure to zero vfio_iommu_type1_info before copying to user
- CVE-2023-54033 bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps
- CVE-2023-54032 btrfs: fix race when deleting quota root from the dirty cow roots list
- CVE-2023-54031 vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check
- CVE-2023-54030 io_uring/net: don't overflow multishot recv
- CVE-2023-5403 Memory corruption in Experion Server
- CVE-2023-54028 RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
- CVE-2023-54027 iio: core: Prevent invalid memory access when there is no parent
- CVE-2023-54026 opp: Fix use-after-free in lazy_opp_tables after probe deferral
- CVE-2023-54025 wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled
- CVE-2023-54024 KVM: Destroy target device if coalesced MMIO unregistration fails
- CVE-2023-54023 btrfs: fix race between balance and cancel/pause
- CVE-2023-54022 ALSA: usb-audio: Fix potential memory leaks at error path for UMP open
- CVE-2023-54021 ext4: set goal start correctly in ext4_mb_normalize_request
- CVE-2023-54020 dmaengine: sf-pdma: pdma_desc memory leak fix
- CVE-2023-5402 Privilege escalation in C-Bus Toolkit
- CVE-2023-54019 sched/psi: use kernfs polling functions for PSI trigger polling
- CVE-2023-54018 drm/msm/hdmi: Add missing check for alloc_ordered_workqueue
- CVE-2023-54017 powerpc/pseries: fix possible memory leak in ibmebus_bus_init()
- CVE-2023-54016 wifi: ath12k: Fix memory leak in rx_desc and tx_desc
- CVE-2023-54015 net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device
- CVE-2023-54014 scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
- CVE-2023-54013 interconnect: Fix locking for runpm vs reclaim
- CVE-2023-54012 net: fix stack overflow when LRO is disabled for virtual interfaces
- CVE-2023-54011 scsi: mpi3mr: Fix an issue found by KASAN
- CVE-2023-54010 ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects
- CVE-2023-5401 Memory corruption in Experion Server
- CVE-2023-54009 i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path
- CVE-2023-54008 virtio_vdpa: build affinity masks conditionally
- CVE-2023-54007 vmci_host: fix a race condition in vmci_host_poll() causing GPF
- CVE-2023-54006 af_unix: Fix data-race around unix_tot_inflight.
- CVE-2023-54005 binder: fix memory leak in binder_init()
- CVE-2023-54004 udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
- CVE-2023-54003 RDMA/core: Fix GID entry ref leak when create_ah fails
- CVE-2023-54002 btrfs: fix assertion of exclop condition when starting balance
- CVE-2023-54001 staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
- CVE-2023-54000 net: hns3: fix deadlock issue when externel_lb and reset are executed together
- CVE-2023-5400 Memory corruption in Experion Server
- CVE-2023-53999 net/mlx5e: TC, Fix internal port memory leak
- CVE-2023-53998 hwrng: virtio - Fix race on data_avail and actual data
- CVE-2023-53997 thermal: of: fix double-free on unregistration
- CVE-2023-53996 x86/sev: Make enc_dec_hypercall() accept a size instead of npages
- CVE-2023-53995 net: ipv4: fix one memleak in __inet_del_ifa()
- CVE-2023-53994 ionic: remove WARN_ON to prevent panic_on_warn
- CVE-2023-53993 PCI/DOE: Fix memory leak with CONFIG_DEBUG_OBJECTS=y
- CVE-2023-53992 wifi: cfg80211: ocb: don't leave if not joined
- CVE-2023-53991 drm/msm/dpu: Disallow unallocated resources to be returned
- CVE-2023-53990 SMB3: Add missing locks to protect deferred close file list
- CVE-2023-5399 Path traversal in C-Bus Toolkit
- CVE-2023-53989 arm64: mm: fix VA-range sanity check
- CVE-2023-53988 fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de()
- CVE-2023-53987 ping: Fix potentail NULL deref for /proc/net/icmp.
- CVE-2023-53986 mips: bmips: BCM6358: disable RAC flush for TP1
- CVE-2023-53985 Zstore 6.5.4 - Reflected Cross-Site Scripting (XSS)
- CVE-2023-53984 HotKey Clipboard 2.1.0.6 - Privilege Escalation Unquoted Service Path
- CVE-2023-53983 Anevia Flamingo XL/XS 3.6.20 Default Credentials Authentication Bypass
- CVE-2023-53982 PMB 7.4.6 SQL Injection Vulnerability via Unsanitized id Parameter
- CVE-2023-53981 PhotoShow 3.0 Remote Code Execution via Exiftran Path Injection
- CVE-2023-53980 ProjectSend r1605 Remote Code Execution via File Extension Manipulation
- CVE-2023-5398 Memory corruption in Experion Server
- CVE-2023-53979 MyBB 1.8.32 Authenticated Remote Code Execution via Chained Vulnerabilities
- CVE-2023-53978 myBB Forums 1.8.26 Stored Cross-Site Scripting via Forum Announcements
- CVE-2023-53977 myBB Forums 1.8.26 Stored Cross-Site Scripting via Forum Management
- CVE-2023-53976 myBB Forums 1.8.26 Stored Cross-Site Scripting via Template Management
- CVE-2023-53975 Atom CMS 2.0 Unauthenticated SQL Injection via Admin Index Page
- CVE-2023-53974 D-Link DSL-124 ME_1.00 Backup Configuration File Disclosure via Unauthenticated Request
- CVE-2023-53973 Zillya Total Security 3.0.2367.0 Local Privilege Escalation via Quarantine Module
- CVE-2023-53972 WebTareas 2.4 Unauthenticated SQL Injection via Session Cookie Parameter