← All credits

This issue was discovered by Found by AISLE in partnership with Red Hat.

86 vulnerability records and advisories credit this contributor.

Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)

Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader

Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing

Sssd: sssd: access control bypass via premature ldap access rule evaluation

Sssd: sssd: denial of service in nss responder via crafted zero-length requests

Sssd: sssd: local denial of service due to null pointer dereference in pam responder

Sssd: sssd: denial of service via malformed pam v1 requests

Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization