CVE-2023-39537

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

CVE-2023-39535

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

Input validation

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

Input validation

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

Input validation

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

CVE-2023-39537

AMI AptioV BIOS contains a vulnerability where improper input validation over a local network can lead to loss of confidentiality, integrity, and availability. Affected: AMI AptioV BIOS firmware (TCG2 context). Root cause: improper input validation in BIOS as described in CVE-2023-39537. Impact: ...

CVE-2023-39537 Improper input validation in BIOS TCG2

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

CVE-2023-39536 Improper input validation in BIOS OFBD

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

CVE-2023-39536

AMI AptioV BIOS contains an improper input validation vulnerability that can be exploited over a local network, potentially impacting confidentiality, integrity, and availability. Affected software: AMI AptioV BIOS. Root cause: input validation issue in BIOS handling over LAN. Exploitation status...

CVE-2023-39535

CVE-2023-39535 concerns AMI AptioV BIOS with a vulnerability due to improper input validation that can be triggered over a local network. Affected: AMI AptioV BIOS firmware (BIOS-level component). Root cause: input validation weakness in the BIOS enabling a local network attacker to potentially c...

AMI AptioV Security Vulnerability

AMI AptioV is a firmware from AMI. A security vulnerability exists in AMI AptioV that stems from the inclusion of a security issue in the BIOS, which can be exploited by an attacker to cause a loss of confidentiality, integrity, and availability through the use of incorrect input validation over ...

AMI AptioV Security Vulnerability

AMI AptioV is a firmware from AMI. A security vulnerability exists in AMI AptioV that stems from the inclusion of a security issue in the BIOS, which can be exploited by an attacker to cause a loss of confidentiality, integrity, and availability through the use of incorrect input validation over ...

PT-2023-27005 · Ami · Ami Aptiov

Name of the Vulnerable Software and Affected Versions: AMI AptioV affected versions not specified Description: The issue is related to improper input validation in the BIOS of AMI AptioV, which can be exploited via the local network. A successful exploit may result in a loss of confidentiality,...

Amazon Linux AMI : php56 (ALAS-2023-1879)

The version of php56 installed on the remote host is prior to 5.6.40-1.144. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1879 advisory. In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause...

Amazon Linux AMI : mysql57 (ALAS-2023-1878)

The version of mysql57 installed on the remote host is prior to 5.7.43-1.20. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1878 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Client programs. Supported versions that are affected are...

Amazon Linux AMI : httpd24 (ALAS-2023-1877)

The version of httpd24 installed on the remote host is prior to 2.4.58-1.101. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1877 advisory. Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server.This issue affects Apache HTTP Server: through...

Amazon Linux AMI : shadow-utils (ALAS-2023-1873)

The version of shadow-utils installed on the remote host is prior to 4.1.4.2-13.11. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1873 advisory. A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password...

Amazon Linux AMI : libXpm (ALAS-2023-1875)

The version of libXpm installed on the remote host is prior to 3.5.10-2.12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1875 advisory. A vulnerability was found in libX11 due to an infinite loop within the PutSubImage function. This flaw allows a local us...

Amazon Linux AMI : libxml2 (ALAS-2023-1874)

The version of libxml2 installed on the remote host is prior to 2.9.1-6.6.44. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1874 advisory. libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in...

Amazon Linux AMI : expat (ALAS-2023-1882)

The version of expat installed on the remote host is prior to 2.1.0-15.34. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1882 advisory. Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function. CVE-2022-23990 Tenable has extracted the precedi...