12214 matches found
EulerOS 2.0 SP9 : glusterfs (EulerOS-SA-2023-2313)
According to the versions of the glusterfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read. CVE-2023-26253 Note that...
Milesight UR32L eventcore access violation vulnerability
Talos Vulnerability Report TALOS-2023-1696 Milesight UR32L eventcore access violation vulnerability July 6, 2023 CVE Number CVE-2023-23571 SUMMARY An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to...
CVE-2023-28542 Buffer Over-read in WLAN HOST
Memory Corruption in WLAN HOST while fetching TX status information...
CVE-2023-28542 Buffer Over-read in WLAN HOST
Memory Corruption in WLAN HOST while fetching TX status information...
CVE-2023-28541 Buffer Over-read in WLAN Host
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...
CVE-2023-28541 Buffer Over-read in WLAN Host
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...
SUSE-SU-2023:2620-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2023-1255: Fixed input buffer over-read in AES-XTS implementation on 64 bit ARM bsc1210714. - CVE-2023-2650: Fixed possible DoS translating ASN.1 object identifiers bsc1211430...
RHEL 9 : openssl (RHSA-2023:3722)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3722 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
`openssl` `X509VerifyParamRef::set_host` buffer over-read
When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte...
GHSA-XCF7-RVMH-G6Q4 `openssl` `X509VerifyParamRef::set_host` buffer over-read
When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte...
RUSTSEC-2023-0044 `openssl` `X509VerifyParamRef::set_host` buffer over-read
When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte...
`openssl` `X509VerifyParamRef::set_host` buffer over-read
When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte...
CVE-2023-35862
libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...
Design/Logic Flaw
libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...
CVE-2023-35862
libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...
CVE-2023-35862
libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...
libcoap 缓冲区错误漏洞
libcoap is obgm open source a lightweight application protocol C implementation. A security vulnerability exists in libcoap version 4.3.1. An attacker exploited this vulnerability to over-read a buffer via the coapparseoscoreconfmem function in coaposcore.c...
CVE-2023-35862
libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...
CVE-2023-35862
CVE-2023-35862 concerns libcoap 4.3.1, with a buffer over-read in coap_parse_oscore_conf_mem (coap_oscore.c). The impact described in the sources is availability impact (NVD CVSS 3.1: base score 6.5) and no confidentiality/integrity impact stated. No explicit remediation or patch version is provi...