[SECURITY] [DLA 2841-1] runc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2841-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb December 06, 2021 https://wiki.debian.org/LTS -...

D-Link DIR-809 formStaticDHCP Buffer Overflow Vulnerability

D-Link DIR-809 is a dual-band router from D-Link, China. buffer overflow vulnerability exists in the fun80034d60 function in the D-Link DIR-809 formStaticDHCP, which can be exploited by attackers to submit special requests that can crash applications or execute arbitrary code...

CVE-2020-36131

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/ratehist.c...

CVE-2021-33274

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN80040af8 in /formWlanSetup. This vulnerability is triggered via a crafted POST request...

CVE-2021-33271

D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function sub80046EB4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request...

CVE-2021-3984

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-28706

guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrator established limit. This is a result of a calculation done with 32-bit precision, which may...

DEBIAN-CVE-2021-3973

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-33481

A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in trytodivideboxes in pgm2asc.c...

Oracle Linux 8 : gcc (ELSA-2021-4386)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4386 advisory. - CVE-2018-12207 / Intel SKX102 OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207 Tenable has extracted the preceding description block directly from the Oracle...

The first lp provider can destroy the pool

Handle jonah1005 Vulnerability details Impact First lp provider received liquidity amount same as the nativeDeposit amount and decides the rate. If the first lp sets the pool's rate to an extreme value no one can deposit to the pool afterward. please refer to the proof of concept section A...

CVE-2021-42774

Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, have a buffer overflow vulnerability in the remote firmware download feature that could allow remote unauthenticated users to perform various attacks. In...

Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2021-2654)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Wi-Fi Aruba Instant deployment application, related to the operation that occurs outside the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the Wi-Fi Aruba Instant deployment application relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted packets to port 8211, using the Protocol Applicatio...

Barrier Buffer Overflow Vulnerability

Barrier is software that mimics the functionality of a Kvm switcher. Barrier suffers from a buffer overflow vulnerability that can be exploited by an attacker to send long TCP messages that can cause the Barrier component and barrierc to run out of memory...

Google Chromium V8 Heap Buffer Overflow Vulnerability

Google Chromium V8 Engine contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsof...

CVE-2021-20701

CVE-2021-20701 affects NEC CLUSTERPRO X 4.3 for Windows and EXPRESSCLUSTER X 4.3 for Windows (and SingleServerSafe variants) with a Disk Agent buffer overflow (CWE-119) that can enable remote code execution over the network. Public documents identify the vulnerable components as Disk Agent and re...

HarmonyOS Buffer Overflow Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A buffer overflow vulnerability exists in HarmonyOS prior to version 2.0, which stems from a heap-based buffer overflow vulnerability in a component of...

SUSE SLED15: libblkid-devel / libblkid-devel-static / libblkid1 / etc (SUSE-SU-2021:3523-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3523-1 advisory. Update to version 2.33.2 to provide seamless update from SLE12 SP5 to SLE15 SP2: - CVE-2021-37600: Fixed an integer overflow which could lead t...

NewStart CGSL CORE 5.05 / MAIN 5.05 : spice-gtk Vulnerability (NS-SA-2021-0164)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has spice-gtk packages installed that are affected by a vulnerability: - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the...