OL CVE Issue Summary :

A use-after-free vulnerability was found in OpenSSL `BIO_new_NDEF()` function.
The function receives a BIO from the caller, prepends a new `BIO_f_asn1` filter BIO onto the front of it to form a BIO chain, and then returns the new head of the BIO chain to the caller.

Under certain conditions, for example, if a CMS recipient public key is invalid, the new filter BIO is freed, and the function returns NULL indicating a failure.

However, in this case, the BIO chain is not properly cleaned up, and the BIO passed by the caller still retains internal pointers to the previously freed filter BIO. If the caller then calls `BIO_pop()` on the BIO, a use-after-free will occur, possibly resulting in a crash.

NVD Listing: NVD - CVE-2017-10989

- Backported patch to address CVE-2017-10989 

The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.

OL CVE Issue Summary:
Insufficient escaping of user-supplied data in `mod_ssl` in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations.

In a logging configuration where `CustomLog` is used with `%{varname}x` or `%{varname}c` to log variables provided by `mod_ssl` such as `SSL_TLS_SNI`, no escaping is performed by either `mod_log_config` or `mod_ssl` and unsanitised data provided by the client may appear in log files.

NVD Listing: NVD - CVE-2016-2037

- Backported patch to fix CVE-2016-2037 

The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file.

OL CVE Issue Summary :

An assert(3) failure flaw was found in the networking helper functions of QEMU. This vulnerability can occur in the eth_get_gso_type() routine if a packet does not have a valid networking L3 protocol (ex. IPv4, IPv6) value.
This flaw allows a guest user to crash the QEMU process on the host, resulting in a denial of service.

OL CVE Issue Summary :

A null pointer dereference flaw was found in libtiff via tif_dirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash, eventually leading to a denial of service.

OL CVE Issue Summary:

A flaw was found in OpenSSH in versions 5.7 through 8.3, where an observable discrepancy occurs and leads to an information leak in the algorithm negotiation. This flaw allows a man-in-the-middle attacker to target initial connection attempts, where there is no host key for the server that has been cached by the client.

OL CVE Issue Summary :

A NULL pointer dereference flaw was found in select.c of SQLite. An out-of-memory error occurs while an early out on the INTERSECT query is processing. This flaw allows an attacker to execute a potential NULL pointer dereference.
 

OL CVE Issue Summary :

selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error
 

OL CVE Issue Summary : 

A flaw was found in the MiniZip component of the zlib package. When opening a new file, MiniZip doesn't properly validate the filename, comments, or extra fields length against the data type used to store this information. This may allow an attacker to craft a malicious ZIP file that will lead to an overflow on the length field. This value is further used in memory allocations and indexing, which can cause an out-of-bounds write, leading to heap corruption and possible arbitrary code execution.