Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-3324)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-3292)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GNU Binutils Excessive Memory Consumption Vulnerability

GNU Binutils is a set of binary tools developed by the GNU Project, mainly used to deal with target files e.g., executables, libraries, etc., covering compilation, linking, debugging, and other phases of the function. GNU Binutils suffers from an excessive memory consumption vulnerability, which...

CVE-2023-45840

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...

Privilege escalation

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...

CVE-2023-45840

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...

CVE-2023-45840

Summary (CVE-2023-45840): Buildroot 2023.08.1 and the dev commit 622698d7847 have data integrity vulnerabilities in the package hash checking, enabling a MITM attack to deliver compromised sources and potentially execute arbitrary commands in the builder. The Red Hat/OSV/Talos advisories describe...

CVE-2023-45840

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...

CVE-2023-28585

Memory corruption while loading an ELF segment in TEE Kernel...

CVE-2023-28585

Memory corruption while loading an ELF segment in TEE Kernel...

CVE-2023-28586

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE...

Memory corruption

Memory corruption while loading an ELF segment in TEE Kernel...

Information disclosure

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE...

CVE-2023-28586 Improper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OS

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE...

CVE-2023-28586 Improper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OS

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE...

CVE-2023-28586

CVE-2023-28586 concerns an information disclosure in Qualcomm-chipset TZ Secure OS when loading an ELF in a trusted execution environment (TEE). The root cause is described in sources as accessing trusted application metadata symbol addresses during ELF load, potentially exposing confidential dat...

CVE-2023-28585 Integer Overflow to Buffer Overflow in TZ Secure OS

Memory corruption while loading an ELF segment in TEE Kernel...

CVE-2023-28585

CVE-2023-28585 is a memory corruption issue in the TZ Secure OS/Tee Kernel triggered when loading an ELF segment. Multiple connected sources identify the root cause as memory corruption within the TEE Kernel during ELF segment loading, with the TZ Secure OS context (Qualcomm components) cited in ...

CVE-2023-28585 Integer Overflow to Buffer Overflow in TZ Secure OS

Memory corruption while loading an ELF segment in TEE Kernel...

PT-2023-29726 · Buildroot +1 · Buildroot +1

Name of the Vulnerable Software and Affected Versions: Buildroot versions 2023.08.1 through 2023.08.1 Buildroot dev commit 622698d7847 Description: Multiple data integrity vulnerabilities exist in the package hash checking functionality. A specially crafted man-in-the-middle attack can lead to...