OL CVE Issue Summary:

Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead to a crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.

OL CVE Issue Summary : 

tcpdump before 4.9.3 mishandles the printing of SMB data

OL CVE Issue Summary:

The issue involves incorrect backtracking in Python's urllib.request.AbstractBasicAuthHandler, which allows a Regular Expression Denial-of-Service (ReDoS) attack. A regex with nested quantifiers in http_error_auth_reqed() fails to efficiently handle maliciously long sequences of commas in the WWW-Authenticate header. When a server sends a crafted WWW-Authenticate header filled with excessive commas, the regex triggers catastrophic backtracking, causing the client to hang or crash.

OL CVE Issue Summary:

A Heap Use After Free vulnerability was discovered in Schematron. The issue arises in the xmlSchematronGetNode() when processing XPath expressions in Schematron schema elements <sch:name path="..."/>, where a pointer to freed memory is returned and then accessed, leading to undefined behavior and potential crashes.

Vulnerable component: xmlSchematronGetNode() extracts a pointer to a node from an XPath node set and then immediately frees the entire XPath object containing that node set, rendering the returned pointer invalid.

OL CVE Issue Summary:

S_reghop3(), S_reghop4(), and S_reghopmaybe3() in regexec.c (before 5.24.0) allow context-dependent attackers to cause a denial of service (infinite loop) via crafted utf-8 data, as demonstrated with the payload `"a\x80"`.

OL CVE Issue Summary :

libxml2 before 2.12.10 has a use-after-free in `xmlSchemaIDCFillNodeTables()` and `xmlSchemaBubbleIDCNodeTables()` in `xmlschemas.c`. 
To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
 

OL CVE Issue Summary:

rpm did not properly handle installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination.
An attacker with write access to a directory in which a subdirectory will be installed could redirect that directory to an arbitrary location and gain superuser privileges.

OL CVE Issue Summary :

A flaw was found in xmlBuildQName(), where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. 
This issue can result in memory corruption or a denial of service when processing crafted input.

OL CVE Issue Summary:

The REXML gem in ruby does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.
 

OL CVE Issue Summary:

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.