2411 matches found
CVE-2021-3696
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of...
CVE-2021-3695
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an...
CVE-2021-3695
CVE-2021-3695 affects grub2. A crafted 16-bit grayscale PNG image can cause an out-of-bounds write in grub2 heap, leading to heap data corruption and potentially arbitrary code execution, bypassing secure boot protections. The vulnerability requires heap-layout triage and the written values are r...
CVE-2021-3695
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an...
CVE-2021-3695
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an...
SUSE-SU-2022:2310-1 Security update for s390-tools
This update of s390-tools fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...
SUSE-SU-2022:2287-1 Security update for fwupdate
This update of fwupdate fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...
PT-2022-37480
Name of the Vulnerable Software and Affected Versions oracleasm affected versions not specified Description The issue is related to the grub2 boothole 3 issues, which necessitated a rebuild of oracleasm with a new secure boot key. Recommendations At the moment, there is no information about a new...
CVE-2021-3695: Out-of-bounds Write
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an...
CVE-2021-3696: Out-of-bounds Write
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of...
PT-2022-37479
Name of the Vulnerable Software and Affected Versions oracleasm affected versions not specified Description The issue is related to the grub2 boothole 3 issues, which requires a rebuild with a new secure boot key. Recommendations At the moment, there is no information about a newer version that...
PT-2022-37478
Name of the Vulnerable Software and Affected Versions s390-tools affected versions not specified Description The issue is related to the grub2 boothole 3 problem, which necessitated a rebuild of s390-tools with a new secure boot key. Recommendations At the moment, there is no information about a...
CVE-2021-3697: Out-of-bounds Write
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerabili...
PT-2022-37477
Name of the Vulnerable Software and Affected Versions fwupdate affected versions not specified Description The issue is related to the grub2 boothole 3 problem, which necessitated a rebuild of fwupdate with a new secure boot key. Recommendations At the moment, there is no information about a newe...
SUSE: Security Advisory (SUSE-SU-2022:2274-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2022:2273-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2022:2272-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:2274-1 Security update for dpdk
This update of dpdk fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...