CVE-2023-38586

CVE-2023-38586 concerns an access issue in macOS where a sandboxed process may bypass sandbox restrictions. The publicly provided description explicitly states the issue is fixed in macOS Sonoma 14. Multiple connected sources corroborate that the vulnerability involves sandbox restrictions and af...

"Connection timeout" error when launching Desktop sessions

Users are unable to connect to Desktop Sessions. All connections fail with status "Connection Timeout"...

PT-2023-26521 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: An access issue was addressed with additional sandbox restrictions. A sandboxed process may be able to circumvent sandbox restrictions. Recommendations: For versions prior to 14, update to macOS Sonoma ...

SUSE-SU-2023:3632-1 Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059127 fixes several issues. The following security issues were fixed: - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol bsc1211395. - CVE-2023-3567: Fixed a use-after-free in vcsread in...

SUSE-SU-2023:3555-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - CVE-2020-22218: Fixed a bug in libssh2packetadd which allows to access out of bounds memory. bsc1214527...

CVE-2023-39616

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...

PT-2023-27034

Name of the Vulnerable Software and Affected Versions AOMedia versions 3.0.0 through 3.5.0 Description The issue is related to an invalid read memory access via the component assign frame buffer p in av1/common/av1 common int.h. This component is part of the AOMedia library. Recommendations For...

Storefront - Unable to access store URL: "Server Error in '/Citrix/#storename#Web' Application"

Security related patches for IE browser and OS were deployed and since then users cannot launch the Storefront page. The following is displayed: Server Error in '/Citrix/storenameWeb' Application...

CVE-2020-22218

An issue was discovered in function libssh2packetadd in libssh2 1.10.0 allows attackers to access out of bounds memory...

CVE-2022-22655

An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4. An app may be able to leak sensitive user information...

CVE-2022-22655

An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4. An app may be able to leak sensitive user information...

CVE-2022-22655

CVE-2022-22655 affects Apple platforms; Apple documents show an access issue in the Sandbox that could allow an app to leak sensitive user information. It is fixed in macOS Monterey 12.3, iOS 15.4, and iPadOS 15.4. Remediation is to update to the listed OS versions where the Sandbox improvements ...

CVE-2022-22655

An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4. An app may be able to leak sensitive user information...

SUSE-SU-2023:3256-1 Security update for pipewire

This update for pipewire fixes the following security issues: - Fixed issue where an app which only has permission to access one stream can also access other streams bsc1213682. Bugfixes: - Fixed division by 0 and other issues with invalid values glfopipewire/pipewire2953 - Fixed an overflow...

PT-2023-35944 · Git +1 · Flac

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

Unable to open Citrix license manger console.

Chrome displays the error that "your clock is ahead/behind" and that it cannot validate the certificate when attempting to open the license server console locally on the license server. If you attempt to connect to the license server console remotely, there is no issue...

SUSE-SU-2023:3185-1 Security update for pipewire

This update for pipewire fixes the following security issues: - Fixed issue where an app which only has permission to access one stream can also access other streams bsc1213682. Bugfixes: - Fixed division by 0 and other issues with invalid values glfopipewire/pipewire2953 - Fixed an overflow...

Design/Logic Flaw

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. A shortcut may be able to modify sensitive Shortcuts app settings...

CVE-2023-32442

CVE-2023-32442 describes an access issue in macOS Shortcuts settings. Affected products include macOS Monterey 12.6.8 and macOS Ventura 13.5, where a shortcut may be able to modify sensitive Shortcuts app settings due to improved access restrictions. The CVE’s attack surface is local (AV:L) with ...

ADC LB VIP sending Reset with code 9872

1. Application was being accessed through the LB vServer and it was not loading 2.nstrace taken on the ADC showedRST flag:0x014 sent by VIP to the client in response to almost every GET request sent by the client. 3. ADC was sending RST with window size 9872 which means Websocket upgrade request...