Fedora: Security Advisory for golang-github-protobuf (FEDORA-2023-6b89bc0305)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for golang-google-protobuf (FEDORA-2023-6b89bc0305)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: golang-github-protobuf-1.5.3-3.fc39

Go support for Google's protocol buffers...

[SECURITY] Fedora 39 Update: golang-google-protobuf-1.31.0-4.fc39

Go support for Google's protocol buffers...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, Adobe Acrobat Reader 2020, and Adobe Acrobat 2017 involve reading data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, Adobe Acrobat Reader 2020, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to reading data beyond the buffer in memory. Exploiting...

The vulnerability of the chkRegVeriRegister() function in TP-LINK’s router software TL-WR886N allows a perpetrator to influence the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the chkRegVeriRegister function in TP-LINK’s TL-WR886N router software lies in the fact that the operation is performed outside of the buffer in memory. Exploiting this vulnerability allows an attacker to compromise the integrity, availability, and confidentiality of the...

[SECURITY] Fedora 39 Update: kitty-0.30.1-2.fc39

Offloads rendering to the GPU for lower system load and buttery smooth scrolling. Uses threaded rendering to minimize input latency. - Supports all modern terminal features: graphics images, unicode, true-col or, OpenType ligatures, mouse protocol, focus tracking, bracketed paste and several new...

Fedora: Security Advisory for kitty (FEDORA-2023-ab43e2ce21)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

netty: SniHandler 16MB allocation leads to OOM

A flaw was found in Netty's SniHandler while navigating TLS handshake which may permit a large heap allocation if the handler did not have a timeout configured. This issue may allow an attacker to send a client hello packet which would cause the server to buffer large amounts of data per...

Snapshot fuzzing direct composition with WTF

Cisco Talos has developed a custom fuzzer using the popular snapshot fuzzer "WTF" which targets Direct Composition in Windows. Talos vulnerability research team used Protocol Buffers developed by Google to serialize and deserialize test cases. The Bochscpu backend of WTF was patched and other...

The vulnerability of MediaTek’s WLAN micro-programming software chip allows attackers to gain access to confidential information.

The vulnerability of the WLAN microprogramming software of MediaTek relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to access confidential information...

The vulnerability of the DriverKit component allows for arbitrary code execution on operating systems such as tvOS, iOS, iPadOS, watchOS, and macOS.

The vulnerability of the DriverKit component for operating systems such as tvOS, iOS, iPadOS, watchOS, and macOS relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Fedora: Security Advisory for golang-google-protobuf (FEDORA-2023-f122ea1b3e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for golang-github-protobuf (FEDORA-2023-f122ea1b3e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: golang-google-protobuf-1.31.0-4.fc38

Go support for Google's protocol buffers...

[SECURITY] Fedora 38 Update: golang-github-protobuf-1.5.3-3.fc38

Go support for Google's protocol buffers...

The vulnerability of the JPEG component of MediaTek’s microprogramming software allows attackers to gain access to confidential information.

The vulnerability of the JPEG component of MediaTek’s microprogramming software relates to reading data outside the buffer in memory. Exploiting this vulnerability could allow an attacker to access confidential information...

The vulnerability of MediaTek’s microprogramming software, related to reading data outside the buffer in memory, allows a hacker to gain access to confidential information.

The vulnerability of MediaTek’s microprogramming software relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

The vulnerability of TP-Link Archer C50, Archer C20, and Archer C2 Wi-Fi routers lies in the fact that the operation data can be accessed outside of the buffer in memory, allowing an attacker to cause a malfunction in the device.

The vulnerability of the microprogrammed software of TP-Link Archer C50, Archer C20, and Archer C2 Wi-Fi routers lies in the fact that the operation data is written outside the buffer in memory when processing request parameters. Exploiting this vulnerability can allow a remote attacker to cause...

EVE OS Security Vulnerability

EVE OS is a general-purpose, open Linux-based operating system for distributed edge computing open-sourced by IF Edge. EVE OS suffers from a security vulnerability that stems from allowing an attacker to use data from a socket to freely allocate buffers on the stack, which could cause a system...