CVE-2023-2977

A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardoshaveverifyrcpackage. The attacker can supply a smart card package with malformed ASN1 context. The cardoshaveverifyrcpackage function scans the ASN1 buffer for 2 tags, where remaining lengt...

CVE-2023-2977

CVE-2023-2977 affects OpenSC pkcs15 code path (cardos_have_verifyrc_package). A malformed ASN.1 context in a smart-card package can trigger a heap-based buffer out-of-bounds read, potentially crashing the process and enabling information leakage when ASAN is enabled during compile. Connected advi...

Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2023-2008)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2023-2029)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-2977

A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardoshaveverifyrcpackage. The attacker can supply a smart card package with malformed ASN1 context. The cardoshaveverifyrcpackage function scans the ASN1 buffer for 2 tags, where remaining lengt...

CVE-2023-2977

A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardoshaveverifyrcpackage. The attacker can supply a smart card package with malformed ASN1 context. The cardoshaveverifyrcpackage function scans the ASN1 buffer for 2 tags, where remaining lengt...

CVE-2023-2977

A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardoshaveverifyrcpackage. The attacker can supply a smart card package with malformed ASN1 context. The cardoshaveverifyrcpackage function scans the ASN1 buffer for 2 tags, where remaining lengt...

CVE-2023-2977

A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardoshaveverifyrcpackage. The attacker can supply a smart card package with malformed ASN1 context. The cardoshaveverifyrcpackage function scans the ASN1 buffer for 2 tags, where remaining lengt...

CVE-2023-2977

A vulnerability was found in OpenSC. This issue causes a buffer overrun in the pkcs15 cardoshaveverifyrcpackage. This flaw allows an attacker to supply a smart card package with a malformed ASN1 context. The cardoshaveverifyrcpackage function scans the ASN1 buffer for two tags, where the remainin...

RIOT RIOT-OS 缓冲区错误漏洞

RIOT RIOT-OS is a set of operating systems used in the Internet of Things IoT space. A security vulnerability exists in RIOT-OS 2023.01 and earlier versions, which stems from a buffer out-of-bounds write and can be exploited by an attacker to conduct a denial-of-service attack...

PT-2023-22410 · Opensc +7 · Opensc +7

Name of the Vulnerable Software and Affected Versions: OpenSC affected versions not specified Description: A security flaw in OpenSC causes a buffer overrun vulnerability in pkcs15 cardos have verifyrc package. An attacker can supply a smart card package with malformed ASN1 context. The cardos ha...

WS-2023-0156

In ImageMagick before 6.9.12-43 and 7.1.0-28 buffer overrun in TIFF coder...

The vulnerability of the filppd.sys driver, a component of the IoControlCode utility in the Twister Antivirus security tool, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the filppd.sys driver, a component of the IoControlCode utility in the Twister Antivirus security tool, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the tool for configuring and maintaining Omron CX-Drive devices lies in the fact that the output operation goes beyond the buffer in memory, allowing a hacker to execute arbitrary code or gain unauthorized access to protected information.

The vulnerability of the tool for configuring and maintaining Omron CX-Drives lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain unauthorized access to protected information using a specially created...

The vulnerability of the PDF document viewing and editing program PDF-XChange lies in the execution of operations outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF-XChange viewer and editor program relates to the issue of operations going beyond the buffer in memory when processing PDF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious link or a specially...

Vulnerability of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, arises due to an operation that goes beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerabilities of the Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are caused by an operation that goes beyond the buffer boundaries in memory. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code through a specially created websit...

The vulnerability of the graphical driver of operating systems iPadOS and iOS allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the graphics driver of operating systems iPadOS and iOS stems from the issue of operations going beyond the buffer in memory during incorrect software rendering of H.264 video. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve operations beyond the buffer boundaries in memory. This allows attackers to cause system failures or execute arbitrary code.

The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird are related to the issue of operations going beyond the buffer in memory when processing HTML content. Exploiting these vulnerabilities can allow a malicious actor to cause service...

The vulnerability of the `bgp_openOptionParse()` function in the bgpd daemon, a software component for implementing routing on Unix-like systems, allows a attacker to cause a service failure.

The vulnerability of the bgpopenOptionParse function in the bgpd daemon, a software component for implementing routing protocols on Unix-like systems, is related to the issue of the operation going beyond the buffer during the processing of BGP OPEN messages with a value of 0xff. Exploiting this...

Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2023-1965)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...