PT-2023-11742 · Mongoose · Mongoose

Name of the Vulnerable Software and Affected Versions: Mongoose version 6.18 Description: The issue is a buffer overflow in the mg resolve from hosts file function when reading from a crafted hosts file. This can occur in Mongoose 6.18. Recommendations: For Mongoose version 6.18, consider updatin...

PT-2023-27105

Name of the Vulnerable Software and Affected Versions Tenda AC8V4 version 16.03.34.06 Description A stack overflow issue was discovered via the list parameter in the set qosMib list function. This issue affects the Tenda AC8V4 router. Recommendations For Tenda AC8V4 version 16.03.34.06, consider...

Buffer overflow

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters i.e., neither alphanumeric nor underscore, aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature...

PT-2023-26084 · Unknown · Ez Softmagic Mp3 Audio Converter

Name of the Vulnerable Software and Affected Versions: EZ softmagic MP3 Audio Converter version 2.7.3.700 Description: A buffer overflow issue was discovered in the software. Recommendations: For EZ softmagic MP3 Audio Converter version 2.7.3.700, at the moment, there is no information about a...

Mozilla: Cookie jar overflow caused unexpected cookie jar state

The Mozilla Foundation Security Advisory describes this flaw as: When the number of cookies per domain was exceeded in document.cookie, the actual cookie jar sent to the host was no longer consistent with expected cookie jar state. This could have caused requests to be sent with some cookies...

PT-2023-26695 · Tenda · Tenda Fh1202 +3

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version 1.2.0.9 PA202 version 1.1.2.5 PW201A version 1.1.2.5 FH1202 version 1.2.0.9 Description: A stack overflow issue was discovered via the page parameter at the "/L7Im" API endpoint. This issue affects several Tenda devices...

Moderate: Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixes: OpenJDK: ZIP file parsing infinite loop 8302483 CVE-2023-22036 OpenJDK: weakness in AES implementation 8308682 CVE-2023-22041 OpenJDK: improper handling o...

MGASA-2023-0232 Updated mutt/neomutt packages fix security vulnerability

Out-of-bounds read in imap/util.c when an IMAP sequence set ends with a comma. CVE-2021-32055 Overflow in uudecoder in Mutt allows read past end of input line CVE-2022-1328...

SUSE-SU-2023:2824-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2023-32763: Fixed an overflow in QTextLayout bsc1211798...

PT-2023-9043 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Description: A stack overflow issue was discovered in the frmL7ProtForm function, related to the page parameter. This could allow a remote attacker to impact the...

SUSE-SU-2023:2780-1 Security update for qt6-base

This update for qt6-base fixes the following issues: - CVE-2023-32763: Fixed an overflow in QTextLayout bsc1211798...

PT-2023-4239 · Tenda · Tenda F1203 +7

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version V1.0 V15.03.06.23 Tenda AC1206 version V15.03.06.23 Tenda AC8 v4 version V16.03.34.06 Tenda AC6 V2.0 version V15.03.06.23 Tenda AC7 V1.0 version V15.03.06.44 Tenda F1203 version V2.0.1.6 Tenda AC5 V1.0 version V15.03.06.28...

PT-2023-22653 · Libcoap +1 · Libcoap +1

Name of the Vulnerable Software and Affected Versions: libcoap library versions 4.3.1-103-g52cfd56 through 4.3.1-119 Description: The issue is related to a Buffer Overflow vulnerability in the coap send function. This vulnerability allows attackers to obtain sensitive information via a malformed...

Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2023-52697)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox, which arises from a failure to validate a member of the DEVMODEW structure set by a printer device driver, which could be exploited by an attacker to...

CVE-2023-32058 Vyper vulnerable to integer overflow in loop

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, due to missing overflow check for loop variables, by assigning the iterator of a loop to a variable, it is possible to overflow the type of the latter. The issue seems to happen only in loops of...

kernel: net: stmmac: fix dma queue left shift overflow issue

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma queue left shift overflow issue When queue number is 4, left shift overflows due to 32 bits integer variable. Mask calculation is wrong for MTLRXQDMAMAP1. If CONFIGUBSAN is enabled, kernel dumps below warning...

MGASA-2023-0161 Updated imagemagick packages fix security vulnerability

A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of...

Important: ghostscript

Issue Overview: In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than ful...

PT-2023-35805 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the H5MM memcpy function, which is called by H5O cache chk serialize and H5C generate image. Recommendations: At the...