kernel: double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c

A double-free flaw was found in the Linux kernel's USB2CAN interface implementation. This issue could allow a local user to crash the system...

kernel: double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c

A double-free flaw was found in the Linux kernel's USB2CAN interface implementation. This issue could allow a local user to crash the system...

CVE-2023-5542

Students in "Only see own membership" groups could see other students in the group, which should be hidden...

CVE-2023-39198

A race condition was found in the QXL driver in the Linux kernel. The qxlmodedumbcreate function dereferences the qobj returned by the qxlgemobjectcreatewithhandle, but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigge...

BIT-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

CVE-2023-5563

The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIGCANAUTOBUSOFFRECOVERY=y. This results in calling ksleep in IRQ context, causing a fatal exception...

CVE-2023-5563

The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIGCANAUTOBUSOFFRECOVERY=y. This results in calling ksleep in IRQ context, causing a fatal exception...

CVE-2023-5563

CVE-2023-5563 affects Zephyr RTOS, specifically the SJA1000 CAN controller driver backend. When built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y, the driver attempts to recover from a bus-off event by calling k_sleep() in IRQ context, which leads to a fatal exception. The linked documents confirm th...

CVE-2023-5563

The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIGCANAUTOBUSOFFRECOVERY=y. This results in calling ksleep in IRQ context, causing a fatal exception...

Type confusion

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to...

CVE-2023-45601

A vulnerability has been identified in Parasolid V35.0 All versions V35.0.262, Parasolid V35.1 All versions V35.1.250, Parasolid V36.0 All versions V36.0.169, Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected...

CVE-2023-45204

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to...

CVE-2023-35796

A vulnerability has been identified in SINEMA Server V14 All versions. The affected application improperly sanitizes certain SNMP configuration data retrieved from monitored devices. An attacker with access to a monitored device could perform a stored cross-site scripting XSS attack that may lead...

CVE-2023-35796

A vulnerability has been identified in SINEMA Server V14 All versions. The affected application improperly sanitizes certain SNMP configuration data retrieved from monitored devices. An attacker with access to a monitored device could perform a stored cross-site scripting XSS attack that may lead...

CVE-2023-35796

Siemens SINEMA Server V14 (all versions) is affected by a vulnerability where SNMP configuration data is not properly sanitized, enabling a stored cross-site scripting (XSS) attack that can lead to arbitrary code execution with SYSTEM privileges on the application server. The issue arises from th...

CVE-2023-3725

Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem...

Buffer overflow

Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem...

CVE-2023-3725 Potential buffer overflow vulnerability in the Zephyr CANbus subsystem

Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem...

CVE-2023-3725

CVE-2023-3725 affects Zephyr OS, specifically the CAN bus subsystem. Technical detail from the connected sources: the vulnerability arises from an assertion and a stack-based buffer overflow in subsys/canbus/isotp/isotp.c, which could lead to a crash and, per some sources, potentially remote code...

PT-2023-7237 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: The issue is related to a potential buffer overflow vulnerability in the Zephyr CAN bus subsystem. This vulnerability may allow a remote attacker to execute arbitrary code. The vulnerability...