Security Bulletin: A vulnerability in Node.js bl package affects Data Replication on Cloud Pak for Data

Summary A vulnerability in Node.js bl package used in Data Replication on Cloud Pak for Data was addressed. Vulnerability Details CVEID:CVE-2020-8244 DESCRIPTION: Node.js bl module could allow a remote attacker to obtain sensitive information, caused by a buffer over-read flaw in the consume...

Moderate: Red Hat Security Advisory: qt5 security and bug fix update

An update for the qt5 stack is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2023-33061 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame...

CVE-2023-33048 Buffer over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing t2lm buffers...

CVE-2023-33047 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing no-inherit IES...

CVE-2023-28572 Buffer Over-read in WLAN HOST

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list...

CVE-2023-28572 Buffer Over-read in WLAN HOST

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list...

CVE-2023-28569 Buffer Over-read in WLAN HAL

Information disclosure in WLAN HAL while handling command through WMI interfaces...

CVE-2023-28568 Buffer Over-read in WLAN HAL

Information disclosure in WLAN HAL when reception status handler is called...

CVE-2023-28566 Buffer Over-read in WLAN HAL

Information disclosure in WLAN HAL while handling the WMI state info command...

CVE-2023-28566 Buffer Over-read in WLAN HAL

Information disclosure in WLAN HAL while handling the WMI state info command...

CVE-2023-28563 Buffer Over-read in IOE Firmware

Information disclosure in IOE Firmware while handling WMI command...

CVE-2023-28554 Buffer Over-read in Qualcomm IPC

Information Disclosure in Qualcomm IPC while reading values from shared memory in VM...

CVE-2023-28554 Buffer Over-read in Qualcomm IPC

Information Disclosure in Qualcomm IPC while reading values from shared memory in VM...

CVE-2023-28553 Buffer Over-read in WLAN Host

Information Disclosure in WLAN Host when processing WMI event command...

CVE-2023-28553 Buffer Over-read in WLAN Host

Information Disclosure in WLAN Host when processing WMI event command...

Rocky Linux 8 : php:7.3 (RLSA-2020:3662)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:3662 advisory. - Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to...

Rocky Linux 9 : vim (RLSA-2022:5942)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:5942 advisory. - Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977. CVE-2022-1785 - Out-of-bounds Write in GitHub repository vim/vim prior to 8.2...

Moderate: qt5 security and bug fix update

Qt is a software toolkit for developing applications. Security Fixes: qt: buffer over-read via a crafted reply from a DNS server CVE-2023-33285 qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation CVE-2023-34410 qtbase: buffer overflow in...

Fedora 39 : chromium (2023-d79ff22c5b)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d79ff22c5b advisory. update to 116.0.5845.179. Fixes following security issues: CVE-2023-4427 CVE-2023-4428 CVE-2023-4429 CVE-2023-4430 CVE-2023-4431 CVE-2023-4572...