Ubuntu 20.04 LTS : Linux kernel vulnerability (USN-5135-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5135-1 advisory. It was discovered that the Linux kernel did not properly account for the memory usage of certain IPC objects. A local attacker could use this to cause a denial of...

Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerabilities (USN-5136-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5136-1 advisory. It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use...

PYSEC-2021-630

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for the Cudnn operations in TensorFlow can be tricked into accessing invalid memory, via a heap buffer overflow. This occurs because the ranks of the input, inputh and inputc parameters are n...

PT-2021-7583 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory overflow in the kernel/cgroup subsystem of the Linux operating system. Exploitation of this issue may allow an attacker to cause a denial of service...

The vulnerability of the `mov_write_video_tag` component in the Ffmpeg library, related to buffer overflows in memory, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the movwritevideotag component in the Ffmpeg library is related to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Adobe Character Animator 缓冲区错误漏洞

Adobe Character Animator is a motion capture and animation tool that provides everyone with an easy-to-use solution for intuitive 2D character animation, real-time animation, and easy sharing and publishing of characters. Adobe Character Animator 2021 4.4 and earlier versions have a memory buffer...

Ubuntu 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-5120-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5120-1 advisory. It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to...

The vulnerability of the gpg2 utility arises from writing beyond the allocated memory space, allowing a perpetrator to cause a service failure.

The vulnerability of the gpg2 utility arises from writing beyond the allocated memory. Exploiting this vulnerability can allow an attacker to cause a service failure upon processing a certificate file that is specially crafted...

Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5115-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5115-1 advisory. It was discovered that a race condition existed in the Atheros Ath9k WiFi driver in the Linux kernel. An attacker could possibly use this to expose...

Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5117-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5117-1 advisory. It was discovered that the btrfs file system in the Linux kernel did not properly handle removing a non- existent device id. An attacker with CAPSYSADMIN...

openSUSE 15 Security Update : kernel (openSUSE-SU-2021:3387-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3387-1 advisory. - A use-after-free flaw was found in the Linux kernel's Bluetooth subsystem in the way user calls connect to the socket and disconnect...

The vulnerability of the Bluetooth Classic microprogramming device implementation for CC256xCQFN-EM devices allows a intruder to cause a service failure.

The vulnerability of the Bluetooth Classic microprogramming device implementation for CC256xCQFN-EM devices is related to overflow errors in dynamic memory buffers. Exploiting this vulnerability can allow a remote attacker to cause the device to fail to perform its functions...

The vulnerability of the Bluetooth Classic microprogramming system implementation of the Zhuhai Jieli Technology AC6366C_DEMO_V1.0 device allows a perpetrator to trigger an emergency shutdown and restart of the device.

The vulnerability of the Bluetooth Classic microprogramming device implementation of Zhuhai Jieli Technology AC6366CDEMOV1.0 is related to buffer overflow errors in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause an unexpected failure and restart of the device...

The vulnerability of the Bluetooth Classic microprogramming device implementation for CC256xCQFN-EM devices allows a intruder to cause a service failure.

The vulnerability of the Bluetooth Classic microprogramming device implementation for CC256xCQFN-EM devices is related to overflow errors in dynamic memory buffers. Exploiting this vulnerability can allow a remote attacker to cause the device to fail to perform its functions...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a...

The vulnerability of the io_uring subsystem in the Linux operating system, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the iouring subsystem in the Linux operating system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize()

The ntfs3g package is susceptible to an input validation flaw. A crafted NTFS image with invalid values could trigger an improper check. This incorrect check causes an integer overflow which then leads to a heap overflow. The highest threat from this vulnerability is to confidentiality, integrity...

Mediatek 芯片 输入验证错误漏洞

Mediatek chips are smartphone chipsets from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek chips, which stems from an integer overflow in the memory management driver that could lead to memory corruption, which could result in a local elevation of privilege that requir...

SUSE SLES12: kernel-azure / kernel-azure-base / kernel-azure-devel / etc (SUSE-SU-2021:3192-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3192-1 advisory. The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs wer...

Risk of memory overflow

Handle 0xsanson Vulnerability details Impact It's possible to overflow the memory in multiple points in the contract, for example by having a long list of tokens and weights: function settleAuction uint256 memory bountyIDs, address memory inputTokens, uint256 memory inputWeights, address memory...