BELL-CVE-2023-3354

Bulletin has no description...

CVE-2023-3354 Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QE...

CVE-2023-3354

CVE-2023-3354 affects the QEMU built-in VNC server. The issue arises from improper I/O watch removal during TLS handshake, which can lead to a NULL pointer dereference when a previously-handshake connection is cleaned up during new connections. This allows a remote unauthenticated attacker to cau...

CVE-2023-3354

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QE...

CVE-2023-3354 Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QE...

RHEL 7 / 8 : Red Hat JBoss Core Services Apache HTTP Server 2.4.51 SP2 (RHSA-2023:3354)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3354 advisory. Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP...

CVE-2022-3354

creationtimestamp| type| source ---|---|--- 2022-09-28 20:34:16+00:00| seen| https://t.me/cibsecurity/50606 2025-04-15 13:54:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11819...

CVE-2022-3354

CVE-2022-3354 affects Open5GS up to version 2.4.10. The vulnerability is located in the UDP Packet Handler’s file lib/core/ogs-tlv-msg.c, and results in a denial of service when the manipulated code path is triggered. The exploit has been disclosed publicly. Remediation is to apply a patch to fix...

Code injection

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 3354 and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by inspecting and modifying the source code of password protected web elements...

Ubuntu: Security Advisory (USN-3354-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : Apport vulnerability (USN-3354-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3354-1 advisory. Felix Wilhelm discovered a path traversal vulnerability in Apport when handling the ExecutablePath field in crash files. An attacker could trick a use...

CVE-2017-3354

CVE-2017-3354 affects Oracle E-Business Suite, Oracle Marketing, User Interface subcomponent. Affected versions include 12.1.1–12.2.6. The vulnerability allows unauthenticated, network-based access via HTTP to compromise Oracle Marketing; attacks may require user interaction. Consequences include...

CVE-2016-3354

The Graphics Device Interface GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to bypass the ASLR protection mechanism via a crafted...

CVE-2016-3354

CVE-2016-3354 : This is the GDI information disclosure vulnerability in Windows GDI. The Graphics Device Interface in affected Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012, Windows RT 8.1, Windows 10 1511/1607) allows local users to bypass ASLR by running a cra...

KLA11907 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of...

MS16-106: Security Update for Microsoft Graphics Component (3185848)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple elevation of privilege vulnerabilities exist in Windows kernel-mode drivers due to improper handling of objects in memory. An authenticated, remote attacker can exploit these,...

CVE-2016-2007

HPE Data Protector before 7.03108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3354...

Code injection

HPE Data Protector before 7.03108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3354...

CVE-2016-2007

HPE Data Protector before 7.03108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3354...

Debian DSA-3354-1 : spice - security update

Frediano Ziglio of Red Hat discovered a race condition flaw in spice's workerupdatemonitorsconfig function, leading to a heap-based memory corruption. A malicious user in a guest can take advantage of this flaw to cause a denial of service QEMU process crash or, potentially execute arbitrary code...