GSD-2023-1000569 nvme-auth: don't override ctrl keys before validation

nvme-auth: don't override ctrl keys before validation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

Siemens SIMATIC WinCC OA Ultralight Client Parameter Injection Vulnerability

SIMATIC WinCC Open Architecture OA is part of the SIMATIC HMI family. It is designed for applications that require a high degree of customer-specific adaptability, large or complex applications, and projects that require specific system requirements or functionality. A parameter injection...

CVE-2022-4141

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

CVE-2022-4141 Heap-based Buffer Overflow in vim/vim

Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command...

PT-2022-7594

Name of the Vulnerable Software and Affected Versions vim versions 9.0.0946 and below Description The issue is related to a heap-based buffer overflow in the vim text editor, which can be exploited by an attacker to gain access to confidential data, compromise data integrity, and cause a denial o...

SUSE: Security Advisory (SUSE-SU-2022:4085-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-45063

CVE-2022-45063 affects the xterm terminal emulator, where code execution could occur via font operations, specifically OSC 50 responses that may carry Ctrl‑g and enable command execution within the vi line editing mode of Zsh. Affected: xterm prior to version 375. Several connected advisories ind...

CVE-2022-45063

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...

PT-2022-23279

Name of the Vulnerable Software and Affected Versions taocms version 3.0.2 Description An arbitrary file deletion issue was found, allowing an attacker to delete files on the server by requesting a specific URL. The issue can be exploited through the admin.php endpoint with parameters such as...

Hotkey "CTRL+Break" does not work on Windows VDA through Citrix Workspace app for Linux Clients

The CTRL+Break hotkey does not work if we launch a Windows VDA session from a Citrix Workspace for Linux client. Steps to reproduce the issue 1. Open the Windows Command Prompt in the Windows VDA session from Citrix Workspace for Linux client. 2. Run the "ping -t google.com" command 3. Press the...

PT-2022-16414 · Tcl · Tcl Linkhub Mesh Wi-Fi

Name of the Vulnerable Software and Affected Versions: TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14 Description: A buffer overflow vulnerability exists in the GetValue functionality. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to...

PT-2022-31554

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.46 Description A potential issue exists in the rpmsg virtio add ctrl dev function, which may lead to a double free error. The actual impact and attack plausibility have not yet been proven...

PT-2022-29703

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.8 and is fixed ...

PT-2022-30478

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.8 and is fixed ...

PT-2022-30599

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-29376

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.8 and is fixed i...

PT-2022-30297

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30686

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30026

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A race condition exists between ctrl cdev ioctl and ubi cdev ioctl. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

ASB-A-205837191

In avrcctrlparsvendorrsp of avrcparsct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...