Use-after-free in Linux kernel's netfilter: nf_tables component

Openssh: regresshion - race condition in ssh allows rce/dos

BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features

An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720

An issue was discovered in the Linux kernel through 5.11.8

Possible denial of service in X.509 name checks

Resource leakage when decoding certificates and keys

Infinite loop in BN_mod_sqrt() reachable when parsing certificates

Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server

In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions…

The c_rehash script allows command injection

A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op

Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a…

OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling

GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007

Incorrect MAC key used in the RC4-MD5 ciphersuite

The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read

An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and…

OCSP_basic_verify may incorrectly verify the response signing certificate

An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c