CVE-2022-24492

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2022-24492

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2022-24492

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2022-24482

Windows ALPC Elevation of Privilege Vulnerability...

Remote code execution

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

Remote code execution

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

Remote code execution

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2022-26809 Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

CVE-2022-26809

A critical Remote Code Execution vulnerability exists in the Microsoft Remote Procedure Call (RPC) Runtime library due to improper filtering of special elements in code segments constructed from external input data. An unauthenticated, remote attacker could exploit this flaw by sending a speciall...

CVE-2022-24528 Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

CVE-2022-24528 Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

CVE-2022-24528

CVE-2022-24528 is a Remote Code Execution vulnerability in Windows RPC Runtime. It is a network-exposed issue affecting the Windows RPC runtime, with a high-severity impact (C/H/I/A: high) per CVSS v3.1 (8.8) and a medium base score (6.8) in CVSS v2. The CVSS v3.1 vector indicates network access,...

CVE-2022-24492

CVE-2022-24492 is a Remote Code Execution vulnerability in Windows RPC Runtime. The connected Akamai blog notes that Windows RPC-related RCE vulnerabilities were patched in Microsoft’s April 2022 Patch Tuesday, including CVE-2022-24492, with patches issued as part of the Windows security updates....

CVE-2022-24492 Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

CVE-2022-24492 Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

CVE-2021-44493

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call...

CVE-2021-44504

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a size variable, stored as an signed int, to equal an extremely large value, which is interpreted as a negative value during a check. This value is then used in a memc...

Buffer overflow

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that...

CVE-2021-44494

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference...

CVE-2021-44504

CVE-2021-44504 affects FIS GT.M through V7.0-000 (YottaDB code base). A crafted input makes a size variable stored as a signed int become extremely large, is interpreted as negative during a check, and is then used in a memcpy on the stack, causing a memory segmentation fault. Documents describe ...