Debian dla-3474 : libnss-myhostname - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3474 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3474-1 [email protected] https://www.debian.org/lts/security/...

DefaultMaxSwapAmount is 10x higher than spec for ETH

Lines of code Vulnerability details Impact In the "coinswap" module a limit is in place for avoiding large swaps and their potential to manipulate the price in a low-liquidity scenario. The spec says: For risk management purposes, a swap will fail if the input coin amount exceeds a pre-defined...

EulerOS Virtualization 3.0.6.0 : systemd (EulerOS-SA-2023-2233)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A use-after-free vulnerability was found in systemd. This issue occurs due to the onstreamio function and dnsstreamcomplete...

EulerOS Virtualization 3.0.6.0 : NetworkManager (EulerOS-SA-2023-2227)

According to the versions of the NetworkManager packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply...

Huawei EulerOS: Security Advisory for NetworkManager (EulerOS-SA-2023-2227)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2023-2233)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: CVE-2022-3821 may affect IBM CICS TX Advanced 10.1

Summary CVE-2022-3821 may affect IBM CICS TX Advanced 10.1. IBM CICS TX Advanced 10.1 has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2022-3821 DESCRIPTION: systemd is vulnerable to a denial of service, caused by an off-by-one error in formattimespan function of time-util.c. By...

Important: libtasn1

Issue Overview: GNU Libtasn1 before 4.19.0 has an ETYPEOK off-by-one array size check that affects asn1encodesimpleder. CVE-2021-46848 Affected Packages: libtasn1 Issue Correction: Run dnf update libtasn1 --releasever 2023.0.20230607 or dnf update --advisory ALAS2023-2023-201 --releasever...

EulerOS Virtualization 2.11.0 : systemd (EulerOS-SA-2023-2113)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific...

EulerOS Virtualization 2.11.1 : systemd (EulerOS-SA-2023-2061)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific...

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2023-2113)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : qemu (ALAS-2023-2061)

The version of qemu installed on the remote host is prior to 3.1.0-8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2061 advisory. A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write...

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2023-1942)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.10.1 : qemu (EulerOS-SA-2023-1913)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register i...

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2023-1911)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-3670 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.3.4 Description: An issue was discovered in the Linux kernel that may lead to out-of-bounds access due to an off-by-one error in memory allocation. This error is caused by the ksmbd smb2 check message function...

EulerOS Virtualization 2.10.0 : qemu (EulerOS-SA-2023-1944)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register i...

Exploit for Off-by-one Error in Sudo_Project Sudo

PECVE-CVE-2021-3156 Exploit for Ubuntu 20.04 using CVE-2021-3...

kernel: drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Off by one in dmdmuboutbox1lowirq The ARRAYSIZE should be = ARRAYSIZE to prevent an out of bounds access...

GLSA-202305-15 : systemd: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202305-15 systemd: Multiple Vulnerabilities - A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp...