CVE-2022-3103

Technical details about CVE-2022-3103 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories; current sources only note an off-by-one issue in the io_uring module without specifics.

CVE-2022-3103

off-by-one in iouring module...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A buffer overflow vulnerability exists in Linux kernel version v6.0-rc3, which stems from the presence of Off-By-One in the iouring module.An attacker can exploit this...

GSD-2022-1006320 drm/nouveau: fix another off-by-one in nvbios_addr

drm/nouveau: fix another off-by-one in nvbiosaddr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006278 drm/nouveau: fix another off-by-one in nvbios_addr

drm/nouveau: fix another off-by-one in nvbiosaddr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006257 wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd()

wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965rsfilllinkcmd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by comm...

GSD-2022-1006186 drm/nouveau: fix another off-by-one in nvbios_addr

drm/nouveau: fix another off-by-one in nvbiosaddr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1006036 wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd()

wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965rsfilllinkcmd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commi...

GSD-2022-1005918 drm/nouveau: fix another off-by-one in nvbios_addr

drm/nouveau: fix another off-by-one in nvbiosaddr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005686 drm/nouveau: fix another off-by-one in nvbios_addr

drm/nouveau: fix another off-by-one in nvbiosaddr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-34139 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to a potential off-by-one overflow in the il4965 rs fill link cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-33893 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue concerns a potential off-by-one overflow in the il4965 rs fill link cmd function. This function is related to wifi and specifically the iwlegacy 4965 module. The actual impact and...

PT-2022-33944 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.8 through v5.15.60 Description: The issue is related to an off-by-one error in nvbios addr within the drm/nouveau component. The actual impact and potential for attack have not been proven yet. Recommendations: For...

PT-2022-34324 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to an off-by-one error in nvbios addr within the drm/nouveau component. The actual impact and potential for attack have not been fully determined. Recommendations: For...

PT-2022-34578 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.326 Description: The issue is related to an off-by-one error in nvbios addr within the drm/nouveau component. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux...

PT-2022-34536 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.291 Description: The issue is related to an off-by-one error in nvbios addr within the drm/nouveau component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

GSD-2022-1005361 drm/nouveau: fix another off-by-one in nvbios_addr

drm/nouveau: fix another off-by-one in nvbiosaddr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005297 wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd()

wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965rsfilllinkcmd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

Hitachi Energy TXpert Hub CoreTec 4 Sudo Vulnerability

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Hitachi Energy Equipment: TXpert Hub CoreTec 4 Vulnerability: Off-by-one Error 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to take control of the system node and its information...

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.

...