5287 matches found
Integer Underflow
ntfs is vulnerable to integer underflow. The vulnerability exists in fuselibreaddir which allows an attacker to read arbitrary memory read operations in NTFS-3G when using libfuse-lite...
CVE-2022-28733
A flaw was found in grub2 when handling IPv4 packets. This flaw allows an attacker to craft a malicious packet, triggering an integer underflow in grub code. Consequently, the memory allocation for handling the packet data may be smaller than the size needed. This issue causes an out-of-bands wri...
CVE-2022-30787
A vulnerability was found in NTFS-3G. An integer underflow in fuselibreaddir allows out-of-bounds read operations...
Oracle Linux 7 : grub2 (ELSA-2022-9469)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9469 advisory. - Add CVE-2022-28736 to the list JIRA: OLDIS-16371 - Fix: CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : NTFS-3G vulnerabilities (USN-5463-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5463-1 advisory. It was discovered that NTFS-3G incorrectly handled the ntfsck tool. If a user or automated system were tricked into using ntfsck ...
grub2 数字错误漏洞
grub2 is a Linux system boot program from the American GNU community. A numeric error vulnerability exists in grub2 that stems from a grubnetrecvip4packets integer underflow...
libspf2 -- Integer Underflow Remote Code Execution
Trendmicro ZDI reports: Integer Underflow Remote Code Execution Vulnerability The specific flaw exists within the parsing of SPF macros. When parsing SPF macros, the process does not properly validate user-supplied data, which can result in an integer underflow before writing to memory. An attack...
PT-2022-6995
Name of the Vulnerable Software and Affected Versions Exim libspf2 affected versions not specified Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. The flaw exists within the parsing of SPF macros, where the process does...
Integer Underflow
blender is vulnerable to integer underflow. The vulnerability exists because it leads to an out-of-bounds read which allows an attacker to read sensitive data using a crafted DDS image file...
OESA-2022-1685 ntfs-3g security update
NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. Security Fixes: ntfsck in...
Tuxera NTFS-3G numeric error vulnerability
Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for supporting read and write NTFS partitions.Tuxera NTFS-3G suffers from a numeric error vulnerability that originates from integer underflow in fuselibreaddir, which can be exploited by attackers to cause...
CVE-2022-30787
An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...
CVE-2022-30787
An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...
ALPINE-CVE-2022-30787
An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...
DEBIAN-CVE-2022-30787
An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...
CVE-2022-30787
An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...
Integer overflow
An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...
UBUNTU-CVE-2022-30787
An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...
CVE-2022-30787
CVE-2022-30787 affects NTFS-3G when using libfuse-lite, caused by an integer underflow in fuse_lib_readdir that enables arbitrary memory reads. The issue is tied to NTFS-3G up through 2021.8.22. Multiple advisories (Debian DLA/DSA, Alpine, CNVD, etc.) document this CVE and list fixes in newer NTF...
