7174 matches found
SUSE-SU-2022:1224-1 Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-1503005960 fixes several issues. The following security issues were fixed: - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap...
CVE-2021-40426
A heap-based buffer overflow vulnerability exists in the sphere.c startread functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...
SUSE-SU-2022:1218-1 Security update for SDL2
This update for SDL2 fixes the following issues: - CVE-2021-33657: Fix a buffer overflow when parsing a crafted BMP image bsc1198001...
SUSE-SU-2022:1215-1 Security update for the Linux Kernel (Live Patch 28 for SLE 15)
This update for the Linux Kernel 4.12.14-15086 fixes one issue. The following security issue was fixed: - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects and ma...
SUSE-SU-2022:1172-1 Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197108 fixes several issues. The following security issues were fixed: - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap object...
CVE-2022-21214 ICSA-22-090-03 Fuji Electric Alpha5
The affected product is vulnerable to a heap-based buffer overflow, which may lead to code execution...
CVE-2022-27292
D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formLanguageChange. This vulnerability allows attackers to cause a Denial of Service DoS via the nextPage parameter...
CVE-2022-27146
GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gfisomappleenumtag...
CVE-2022-27148
GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow...
Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to execute arbitrary code.
Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable due to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
CVE-2022-27145
Removed by vendor...
CVE-2022-27022
There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...
CVE-2021-26112
CVE-2021-26112 identifies multiple stack-based buffer overflow vulnerabilities in Fortinet FortiWAN before version 4.5.9, affecting both network daemons and the command line interpreter. The underlying issue is a buffer overflow (CWE-121) that may allow an unauthenticated attacker to corrupt memo...
Autodesk Navisworks Freedom DWF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Navisworks Freedom. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Ubuntu: Security Advisory (USN-5357-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2022:1031-1 Security update for apache2
This update for apache2 fixes the following issues: - CVE-2022-23943: heap out-of-bounds write in modsed bsc1197098. - CVE-2022-22720: HTTP request smuggling due to incorrect error handling bsc1197095. - CVE-2022-22719: use of uninitialized value of in r:parsebody in modlua bsc1197091. -...
The vulnerability of the TCP protocol implementation in the Stack Trace TCP/IP protocol allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the TCP protocol implementation in the Stack Trace TCP/IP protocol is related to integer overflow when processing the length parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Tenda AX1806 saveParentControlInfo function stack overflow vulnerability (CNVD-2022-23524)
The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda AX1806 saveParentControlInfo function, which can be exploited by an attacker to cause a Denial of Service DoS via the time parameter...
FasterXML jackson-databind 缓冲区错误漏洞
FasterXML jackson-databind is a JAVA-based data formats such as XML and JSON and JAVA objects can be converted to the library . Jackson can easily convert Java objects into json objects and xml documents , the same can also be json, xml into Java objects . FasterXML jackson-databind 2.13.0 before...