Security Vulnerabilities - CVEs Published In August 2023
Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx function.
CVSS Score
6.5
EPSS Score
0.002
Published
2023-08-22
An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.
CVSS Score
6.5
EPSS Score
0.002
Published
2023-08-22
An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.
CVSS Score
6.5
EPSS Score
0.002
Published
2023-08-22
A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon_invert_region() function.
CVSS Score
4.4
EPSS Score
0.002
Published
2023-08-22
GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-08-22
A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_sorted_data of the library may lead to unexpected application termination or arbitrary code execution.
CVSS Score
6.5
EPSS Score
0.002
Published
2023-08-22
libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-08-22
VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed.
CVSS Score
7.5
EPSS Score
0.003
Published
2023-08-22
An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-08-22
dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-08-22