3395 matches found
PT-2024-14645
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a missing bound check in the dbAdjTree while accessing the dmt stree, which can lead to an array-index-out-of-bounds condition. To address this, a bool is ctl has...
Security Bulletin: IBM Storage Fusion may be vulnerable to Denial of Service via use of openshift/machine-api-operator, openshift/machine-config-operator (CVE-2020-28851, CVE-2020-28852, CVE-2021-44716)
Summary OpenShift's machine-api-operator and machine-config-operator are used by IBM Storage Fusion to interact with the OpenShift platform, operators, and custom resource definitions. Vulnerabilities in these libraries include an improper validation of array index and possible uncontrolled...
Moderate: Red Hat Security Advisory: libreoffice security update
An update for libreoffice is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
libreoffice: Array index underflow in Calc formula parsing
A vulnerability was found in LibreOffice. Improper validation of the array index in the spreadsheet component of The Document Foundation in LibreOffice allows an attacker to craft a spreadsheet document that causes an array index underflow when loaded. In affected versions of LibreOffice, certain...
CentOS 8 : libreoffice (CESA-2023:6933)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:6933 advisory. - Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code fro...
RHEL 8 : libreoffice (RHSA-2023:6933)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6933 advisory. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor...
Moderate: libreoffice security update
LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...
PT-2024-14760
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, specifically in the drm/amd module, where the value of pcie table-num of link levels will be 0 in an SR-IOV environment, causing an array index...
Multiple vulnerabilities in JustSystems products
Overview Multiple products provided by JustSystems Corporation contain multiple vulnerabilities listed below. Use after free CWE-416 - CVE-2023-34366 Integer overflow CWE-190 - CVE-2023-38127 Access of resource using incompatible type Type confusion CWE-843 - CVE-2023-38128 Improper validation of...
PT-2023-9767
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an array-index-out-of-bounds error in the diAlloc function of the jfs component. This error occurs due to the lack of a check against the agno of the iag while...
PT-2024-14755
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an array-index-out-of-bounds error in the dbFindLeaf function when searching for dmtree t for sufficient free blocks. This error occurs while getting an element i...
CVE-2023-24850 Improper Validation of Array Index in HLOS
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application...
PT-2024-14759
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the lack of validity checks for db maxag and db agpref, which are used as indexes for the db agfree array. This can lead to errors, as reported by Syzbot with an...
CVE-2023-24850: Improper Validation of Array Index
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application...
Improper Validation of Array Index
Overview github.com/greenpau/caddy-security is a Security App and Plugin for Caddy v2. Affected versions of this package are vulnerable to Improper Validation of Array Index when parsing a Caddyfile. Multiple parsing functions in the affected library do not validate whether their input values are...
SUSE CVE-2023-21636
Memory Corruption due to improper validation of array index in Linux while updating adn record...
CVE-2022-40534
Memory corruption due to improper validation of array index in Audio...
CVE-2023-21636
Memory Corruption due to improper validation of array index in Linux while updating adn record...
