7489 matches found
CVE-2024-0565
An out-of-bounds memory read flaw was found in receiveencryptedstandard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service...
CVE-2024-0565
An out-of-bounds memory read flaw was found in receiveencryptedstandard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service...
CVE-2024-0565
An out-of-bounds memory read flaw was found in receiveencryptedstandard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service...
CVE-2024-0565
CVE-2024-0565 affects the Linux kernel CIFS (SMB) client: receive_encrypted_standard in fs/smb/client/smb2ops.c contains an out-of-bounds read caused by an integer underflow in memcpy length, leading to denial of service. Connected advisories consistently reference this CVE in kernel CIFS decrypt...
CVE-2024-0565 Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client
An out-of-bounds memory read flaw was found in receiveencryptedstandard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service...
CVE-2024-0565
An out-of-bounds memory read flaw was found in receiveencryptedstandard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service. Mitigation To mitigate this issue, prevent modul...
CVE-2024-0565: Integer Underflow (Wrap or Wraparound)
An out-of-bounds memory read flaw was found in receiveencryptedstandard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service...
Omron PLC Access Control Error Vulnerability
Omron PLC CJ series and so on are products of Omron Japan.Omron PLC CJ series is a CJ series Programmable Logic Controller PLC.Omron PLC CS series is a CS series Programmable Logic Controller PLC.Omron PLC NJ series is a NJ series programmable logic controller. An Access Control Error vulnerabili...
UBUNTU-CVE-2023-47992
An integer overflow vulnerability in FreeImageIO.cpp::MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, cause a denial-of-service attacks and/or run arbitrary code...
UBUNTU-CVE-2024-0340
A vulnerability was found in vhostnewmsg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhostnewmsg function. This issue can allow local privileged users to read...
PT-2024-1635 · Siemens · Solid Edge
Name of the Vulnerable Software and Affected Versions: Solid Edge SE2023 versions prior to V223.0 Update 10 Description: A vulnerability has been identified in the affected applications, which contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR...
libreoffice:xlsxfuzzer: Heap-use-after-free in oox::drawingml::Shape::addShape
Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5594141266345984 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: xlsxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...
AlmaLinux 9 : tigervnc (ALSA-2024:0010)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0010 advisory. - A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stor...
xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information...
xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information...
xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information...
xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information...
CVE-2023-6693: Stack-based Buffer Overflow
A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtionetflushtx function if guest features VIRTIONETFHASHREPORT, VIRTIOFVERSION1 and VIRTIONETFMRGRXBUF are enabled. This could allow a malicious user to overwrite local variables...
libxml2:xml: Heap-use-after-free in xmlStaticCopyNode
Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5663442862145536 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x604000000aa...
xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information...