The vulnerability of the close() function in the iffoutput component of the OpenImageIO image processing library allows a perpetrator to access confidential data, compromise its integrity, and cause service failure.

The vulnerability of the close function in the iffoutput image processing library in OpenImageIO is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its...

The vulnerability of the close() function in the iffoutput component of the OpenImageIO image processing library allows a perpetrator to access confidential data, compromise its integrity, and cause service failure.

The vulnerability of the close function in the iffoutput image processing library in OpenImageIO is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its...

The vulnerability of the close() function in the zfileoutput component of the OpenImageIO image processing library allows a attacker to cause a service failure.

The vulnerability of the close function in the zfileoutput component of the OpenImageIO image processing library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created file...

The vulnerability of the close() function in the iffoutput component of the OpenImageIO image processing library allows a perpetrator to access confidential data, compromise its integrity, and cause service failure.

The vulnerability of the close function in the iffoutput image processing library in OpenImageIO is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its...

The vulnerability of the close() function in the iffoutput component of the OpenImageIO image processing library allows a perpetrator to access confidential data, compromise its integrity, and cause service failure.

The vulnerability of the close function in the iffoutput image processing library in OpenImageIO is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its...

Undertow: Infinite loop in SslConduit during close

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates...

CVE-2023-39841

Missing encryption in the RFID tag of Etekcity 3-in-1 Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device...

function rngComplete is unpprotected

Lines of code Vulnerability details Impact The rngComplete is a function Called by the relayer to complete the Rng relay auction. However it has zero access control. Proof of Concept The function makes calls to the prizepool to close a draw, it also withdraws from a reserve. All these are done wi...

Missing sanityCheckUnderlying Call in Certain Functions of OptionsPositionManager Contract

Lines of code Vulnerability details Bug Description In the OptionsPositionManager contract, there is a missing call to the sanityCheckUnderlying function at the beginning of the sellOptions and close functions. These functions involve interactions with option assets and underlying tokens. However...

CVE-2023-32258

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2LOGOFF and SMB2CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this...

AZL-27763 CVE-2023-32258 affecting package kernel for versions less than 5.15.135.1-2

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2LOGOFF and SMB2CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this...

DEBIAN-CVE-2023-32258

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2LOGOFF and SMB2CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this...

UBUNTU-CVE-2023-32258

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2LOGOFF and SMB2CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from flaws in the handling of the SMB2LOGOFF and SMB2CLOSE commands, which lack proper locking when performing operations on objects, and...

OESA-2023-1436 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A time-of-check to time-of-use issue exists in iouring subsystem's IORINGOPCLOSE operation in the Linux kernel's versions 5.6 - 5.11 inclusive, which allows a local user to elevate their privileges to root. Introduced in...

The vulnerability of the udf_close_lvid() function in the fs/udf/super.c module of the Linux operating system allows a attacker to compromise the accessibility of protected information.

The vulnerability of the udfcloselvid function in the fs/udf/super.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

CVE-2023-38434

xHTTP 72f812d has a double free in closeconnection in xhttp.c via a malformed HTTP request method...

WordPress 1 Click Close Store Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Software 1 Click Close Store Type Plugin Vulnerable versions = 1.1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5d6ea0096ad8 Credits Rafie Muhammad Patchstack...

CLSA-2023-1689258794 Fix CVE(s): CVE-2023-34241

SECURITY UPDATE: use after free - debian/patches/CVE-2023-34241.patch: call httpClose after logging. - CVE-2023-34241 Fix test/run-stp-tests.sh - debian/patches/waiting-limit.patch: limit the waiting for a server dunring tests...

OESA-2023-1410 cups security update

Security Fixes: OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have...