CVE Vulnerability Catalog

In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, a stack memory corruption vulnerability exists in the IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service.

In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, a stack-based buffer overflow could allow a remote attacker to cause a denial of service.

In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, uncontrolled resource consumption when parsing directory records could allow a local attacker to cause a denial of service.

In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, improper limitation of a pathname to a restricted directory could allow a remote attacker to bypass security restrictions.

In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, an out-of-bounds write could allow a local attacker to cause a denial of service.

In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, a buffer overflow could allow a remote attacker to cause a denial of service.

In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, a NULL pointer dereference could allow a local attacker to cause a denial of service.

In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, an out-of-bounds read could allow a local attacker to obtain sensitive information or cause a denial of service.

In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, improper validation of symbolic links could allow a local attacker to cause a denial of service.

In IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1, an out-of-bounds read could allow a local attacker to disclose sensitive kernel memory.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to improper authentication.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due to the exposure of sensitive information.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary code due to a heap-based buffer overflow.

IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow.

Tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails. Ignoring the return value of relay_send_command_from_edge() leads to a crash.

Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely.

Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has already been closed. A malicious exit node could use this to crash a client.

Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS.