LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections tools/tiffcrop.c:7619 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 236b7191.

The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen PV guest OS users to cause a denial of service or gain privileges.

Extracting malicious crates can fill the file system

Extracting malicious crates can corrupt arbitrary files

Linux Kernel BPF libbpf.c find_prog_by_sec_insn null pointer dereference

Poetry Argument Injection vulnerability can lead to local Code Execution

Denial of service in Helm

Flux2 Helm Controller denial of service

jsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled

OpenSSL: CVE-2022-3602 X.509 certificate verification buffer overrun

Redis string pattern matching can be abused to achieve Denial of Service

LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit e8131125.

LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit cfbb883b.

LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection tools/tiffcrop.c:6826 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 236b7191.

Integer overflow in certain command arguments can drive Redis to OOM panic

Linux Kernel CIFS sess.c sess_free_buffer double free

Linux Kernel BPF r8152.c intr_callback logging of excessive data

A flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local unprivileged user to crash the system causing a denial of service.

Windows Enterprise App Management Service Remote Code Execution Vulnerability