Buffer overflow

Various Lexmark devices have a Buffer Overflow issue 1 of 2...

CVE-2018-15520

Various Lexmark devices have a Buffer Overflow issue 2 of 2...

CVE-2018-15520

Various Lexmark devices have a Buffer Overflow issue 2 of 2...

Buffer overflow

Various Lexmark devices have a Buffer Overflow issue 2 of 2...

CVE-2018-15519

Summary: CVE-2018-15519 affects Lexmark devices (printers/multi-function devices). The issue is a buffer overflow caused by improper restriction of operations within the bounds of a memory buffer (described as “issue 1 of 2” in multiple sources). The NVD and OpenVAS entries indicate high/severe i...

CVE-2018-15519

Various Lexmark devices have a Buffer Overflow issue 1 of 2...

CVE-2018-15520

Various Lexmark devices have a Buffer Overflow issue 2 of 2...

CVE-2018-15520

CVE-2018-15520 affects various Lexmark devices with a memory buffer overflow vulnerability. The issue is described as a buffer overflow in the device’s operations, with a network-based attack vector and no authentication required (CVSS2/3: 7.5/9.8; high/critical). The root cause is improper restr...

CVE-2018-17944

On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there. This occurs because stored credentials are...

Design/Logic Flaw

On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there. This occurs because stored credentials are...

CVE-2018-17944

CVE-2018-17944 affects certain Lexmark devices that communicate with LDAP or SMTP servers. The vulnerability occurs because stored credentials are not automatically deleted when the server hostname is changed to one controlled by an attacker, allowing the attacker to capture LDAP/SMTP credentials...

CVE-2018-17944

On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there. This occurs because stored credentials are...

Lexmark Printer Shortcut Integrity Vulnerability (CVE-2019-6489)

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices allow remote attackers to erase stored shortcuts. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Multiple Lexmark Product Input Validation Vulnerabilities

Lexmark is an American developer and manufacturer of printers. An input validation vulnerability exists in multiple Lexmark products, which could be exploited by an attacker to perform a delete operation...

CVE-2019-6489

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts...

CVE-2019-6489

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts...

Code injection

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts...

CVE-2019-6489

Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts...

CVE-2019-6489

The vulnerability CVE-2019-6489 affects Lexmark devices: CX, MX, X, XC, XM, XS, and 6500e printers. The public description states that, prior to 2019-02-11, remote attackers could erase stored shortcuts, implying an issue with how input is handled by the device. Connected sources align on the sam...

Lexmark Printer Buffer Overflow Vulnerability (CVE-2018-15519)

Multiple Lexmark printers are prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...