NetApp HCI Compute Node Firmware

Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode (-s -e), Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui version of Vim by feeding some binary characters to Vim. The function that handles the scrolling however may be triggering a redraw, which will access the ScreenLines pointer, even so this variable hasn't been allocated (since there is no screen). This vulnerability is fixed in 9.1.1043.

Published: 2025-01-20T22:53:14.325Z
Updated: 2025-03-14T10:03:09.511Z

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.

Published: 2022-10-24T00:00:00.000Z
Updated: 2025-05-30T19:20:52.533Z

The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state.

Published: 2022-04-11T04:15:06.000Z
Updated: 2024-08-03T06:10:56.796Z

jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition.

Published: 2022-04-08T04:11:51.000Z
Updated: 2024-08-03T06:03:52.967Z

A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.

Published: 2022-06-01T19:03:32.000Z
Updated: 2024-08-03T05:32:59.845Z