CVE-2023-6355

CVE-2023-6355 affects Gallagher Controller 7000. The issue is an incorrect selection of fuse values in the Controller 7000 platform, which allows bypassing protection mechanisms to enable local debug. Affected versions are: 8.70 before 231204a, 8.80 before 231204a, 8.90 before 231204a, and 9.00 b...

PT-2023-32624 · Gallagher · Gallagher Controller 7000

Name of the Vulnerable Software and Affected Versions: Gallagher Controller 7000 versions 8.70 prior to vCR8.70.231204a Gallagher Controller 7000 versions 8.80 prior to vCR8.80.231204a Gallagher Controller 7000 versions 8.90 prior to vCR8.90.231204a Gallagher Controller 7000 versions 9.00 prior t...

container-tools:rhel8 bug fix update

An update is available for libslirp, module.buildah, module.crun, buildah, fuse-overlayfs, udica, module.oci-seccomp-bpf-hook, module.netavark, module.runc, conmon, module.containers-common, python-podman, module.libslirp, module.aardvark-dns, module.fuse-overlayfs, runc, criu, aardvark-dns,...

container-tools:4.0 security and bug fix update

buildah 1:1.24.6-7 - rebuild for CVE-2023-29406 - Related: 2176055 1:1.24.6-6 - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: 2179943 - Resolves: 2187341 - Resolves:...

Critical: Red Hat Security Advisory: Red Hat Fuse 7.12.1 release and security update

A minor version update from 7.12 to 7.12.1 is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scori...

Critical: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ Fuse 6.3 R20 HF1 security and bug fix update

An update is now available for Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2023-21671

Memory Corruption in Core during syscall for Sectools Fuse comparison feature...

Memory corruption

Memory Corruption in Core during syscall for Sectools Fuse comparison feature...

CVE-2023-21671 Improper Input Validation in Core

Memory Corruption in Core during syscall for Sectools Fuse comparison feature...

CVE-2023-21671 Improper Input Validation in Core

Memory Corruption in Core during syscall for Sectools Fuse comparison feature...

CVE-2023-21671

CVE-2023-21671 is described across multiple sources as a memory corruption issue in Core during a syscall for the Sectools Fuse comparison feature. Public descriptions consistently state memory corruption in a Qualcomm-related Core/closed-source component, with a local attacker and high to critic...

PT-2023-18332 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption in Core during a syscall for the Sectools Fuse comparison feature. Recommendations: At the moment, there is no information about a newer version that...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a core memory corruption during a system call to the Sectools Fuse comparison function...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: atlantis, nats, flux-source-controller, nginx-stable, conftest, gitness, helm, nghttp2, nginx-mainline, minio, cue, ollama, hugo, skaffold, stakater-reloader, pulumi-language-yaml, sigstore-scaffolding, amass, terraform, ko, prometheus-adapter, weaviate,...

container-tools:rhel8 bug fix and enhancement update

An update is available for libslirp, module.buildah, module.crun, buildah, fuse-overlayfs, udica, module.oci-seccomp-bpf-hook, module.netavark, module.runc, conmon, module.containers-common, python-podman, module.libslirp, module.aardvark-dns, module.fuse-overlayfs, runc, criu, aardvark-dns,...

Buffer overflow

Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system...

CVE-2023-4260 Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem

Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system...

CVE-2023-4260

CVE-2023-4260 concerns Zephyr’s fuse file system. The available connected sources describe a potential off‑by‑one buffer overflow in the fuse filesystem, with the issue rooted in that component and the impact stated as high across confidentiality, integrity, and availability in the NVD entry. The...

PT-2023-28453 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: A potential off-by-one buffer overflow vulnerability exists in the Zephyr fuse file system. Recommendations: At the moment, there is no information about a newer version that contains a fix...

Oracle Linux 7 : fuse (ELSA-2020-5773)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5773 advisory. - Security Update based on ELSA-2018-3324 fuse: bypass of the 'userallowother' restriction when SELinux is active. OraBugzilla: 43547CVE-2018-10906 Lans Hung...