CVE-2023-27882: Heap-based Buffer Overflow

A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability...

AMD SMM Supervisor Vulnerability Security Notice

Bulletin ID: AMD-SB-7011 Potential Impact: Loss of confidentiality, integrity, and availability Severity: High Summary External researchers reported a potential vulnerability during SMM Supervisor initialization which may impact some AMD processors. On systems that do not have Supervisor Mode...

pytest-embedded-serial-esp (>=0.6.0, <=0.7.1), teramesh-hardware-tester (>=0.1.0, <=0.9.0) potentially affected by CVE-2023-46894 via esptool (3.3.3)

esptool PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on esptool and may be impacted: - pytest-embedded-serial-esp =0.6.0, =0.1.0, =0.9.0 Source cves: CVE-2023-46894 Source advisory: OSV:GHSA-3F38-96QM-R3FW...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.cr4), org.wildfly.core:wildfly-domain-http-interface (1.0.0.cr4) +19 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.cr4)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.cr4 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.beta3), org.wildfly.core:wildfly-domain-http-interface (1.0.0.beta3) +18 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.beta3)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.beta3 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.beta6), org.wildfly.core:wildfly-domain-http-interface (1.0.0.beta6) +19 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.beta6)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.beta6 -...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha1), org.wildfly.core:wildfly-domain-http-interface (2.0.0.alpha1) +19 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (2.0.0.alpha1)

org.wildfly.core:wildfly-controller MAVEN version 2.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha1 -...

org.hawkular.agent:hawkular-dmr-client (>=0.1.0, <=0.3.0), org.hawkular.agent:hawkular-monitor (>=0.1.0, <=0.3.0) +73 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.cr6)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.cr6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.hawkular.agent:hawkular-dmr-client =0.1.0, =0.1.0, =0.1.0, =0.1.0, =8.0.0.beta1,...

org.wildfly.core:wildfly-deployment-scanner (2.0.0.alpha3), org.wildfly.core:wildfly-domain-http-interface (2.0.0.alpha3) +44 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (2.0.0.alpha3)

org.wildfly.core:wildfly-controller MAVEN version 2.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 2.0.0.alpha3 -...

org.wildfly.core:wildfly-deployment-scanner (1.0.0.cr3), org.wildfly.core:wildfly-domain-http-interface (1.0.0.cr3) +19 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.cr3)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-deployment-scanner 1.0.0.cr3 -...

org.wildfly.arquillian:wildfly-arquillian-common (1.0.0.cr1), org.wildfly.arquillian:wildfly-arquillian-container-embedded (1.0.0.cr1) +25 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (1.0.0.cr2)

org.wildfly.core:wildfly-controller MAVEN version 1.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.arquillian:wildfly-arquillian-common 1.0.0.cr1 -...

Micrium uC-HTTP Buffer Error Vulnerability

Micrium uC-HTTP is a software from Micrium USA that provides TCP/IP functionality for devices. The software is designed for embedded applications with a compact, reliable, high-performance TCP/IP stack with dual support for IPv4 and IPv6. A buffer error vulnerability exists in Micrium uC-HTTP...

[SECURITY] Fedora 39 Update: mbedtls-2.28.5-1.fc39

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...

You’d be surprised to know what devices are still using Windows CE

Windows CE -- an operating system that, despite being out for 27 years, never had an official explanation for why it was called "CE" -- finally reached its official end-of-life period this week. This was Microsofts first operating system for embedded and pocket devices, making an appearance on...

[SECURITY] Fedora 37 Update: mbedtls-2.28.5-1.fc37

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...

Linux ENE USB Storage Heap Buffer Overflow DoS

The vulnerability of the mslibprocessbootblock function in the drivers/usb/storage/eneub6250.c file of the eneusb6250 driver for the ENE SD/MS embedded system in the Linux operating system is related to access to memory beyond the allocated buffer. Exploiting this vulnerability could allow a...

OESA-2023-1746 xerces-j2 security update

Security Fixes: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attack...

OESA-2023-1747 xerces-j2 security update

Security Fixes: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attack...

Adobe Bridge Buffer Overflow Unauthorized Access

The vulnerability of the Adobe Bridge file manager is related to the issue where operations are performed outside the buffer in memory when processing embedded fonts. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially...

Adobe Bridge Memory Use After Free Unauthorized Access

The vulnerability of the Adobe Bridge file manager is related to the use of memory after it is freed during the processing of embedded fonts. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created file or a malicious...