Stack overflow

TensorFlow is an open source platform for machine learning. The implementation of FractionalAvgPoolGrad does not fully validate the input originputtensorshape. This results in an overflow that results in a CHECK failure which can be used to trigger a denial of service attack. We have patched the...

CVE-2022-35940 Int overflow in `RaggedRangeOp` in Tensoflow

TensorFlow is an open source platform for machine learning. The RaggedRangOp function takes an argument limits that is eventually used to construct a TensorShape as an int64. If limits is a very large float, it can overflow when converted to an int64. This triggers an InvalidArgument but also...

PT-2022-33555 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a potential off-by-one overflow in the il4965 rs fill link cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-33365 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to an overflow implicit truncation warning in the irqchip/tegra component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33569 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to an overflow in the lib, where 64-bit tests should not be defined on 32-bit systems. The actual impact and attack plausibility have not yet been proven. Recommendation...

SUSE-SU-2022:2996-1 Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues: - CVE-2021-46829: Fixed overflow when compositing or clearing frames bsc1201826...

PT-2022-23422 · H3C · H3C Magic Nx18 Plus

Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered via the function EditWlanMacList. Recommendations: For H3C Magic NX18 Plus version NX18PV100R003, consider disabling the EditWlanMacList function as ...

PT-2022-24086 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Description: A stack overflow issue was discovered in the function formWifiWpsOOB, specifically via the index parameter. Recommendations: For version 15.03.06.23, consider restricting access to the...

PT-2022-23420 · H3C · H3C Magic Nx18 Plus

Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered via the function Asp SetTimingtimeWifiAndLed. This issue affects the H3C Magic NX18 Plus device. Recommendations: For H3C Magic NX18 Plus version...

PT-2022-23402 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A stack overflow issue was discovered via the command parameter in the setTracerouteCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK N350RT version...

PT-2022-23803 · H3C · H3C H200

Name of the Vulnerable Software and Affected Versions: H3C H200 version H200V100R004 Description: A stack overflow issue was discovered via the function SetAP5GWifiById. Recommendations: For H3C H200 version H200V100R004, consider disabling the SetAP5GWifiById function as a temporary workaround...

PT-2022-23390 · H3C · H3C B5 Mini

Name of the Vulnerable Software and Affected Versions: H3C B5 Mini version B5MiniV100R005 Description: A stack overflow issue was discovered in the function EditMacList.d. Recommendations: For version B5MiniV100R005, consider disabling the EditMacList.d function as a temporary workaround until a...

PT-2022-23815 · H3C · H3C H200

Name of the Vulnerable Software and Affected Versions: H3C H200 version H200V100R004 Description: A stack overflow issue was discovered via the function UpdateSnat. Recommendations: For H3C H200 version H200V100R004, consider disabling the UpdateSnat function until a patch is available...

PT-2022-23436 · H3C · H3C Gr-1200W

Name of the Vulnerable Software and Affected Versions: H3C GR-1200W version MiniGRW1A0V100R006 Description: A stack overflow issue was discovered via the addactionlist function. Recommendations: For H3C GR-1200W version MiniGRW1A0V100R006, as a temporary workaround, consider disabling the...

PT-2022-23438 · H3C · H3C Gr-1200W

Name of the Vulnerable Software and Affected Versions: H3C GR-1200W MiniGRW1A0V100R006 Description: A stack overflow issue was discovered in the H3C GR-1200W MiniGRW1A0V100R006 via the function debug wlan advance. Recommendations: For H3C GR-1200W MiniGRW1A0V100R006, consider disabling the debug...

PT-2022-23389 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.6134 B20201202 Description: A stack overflow issue was discovered in the setDiagnosisCfg function via the ip parameter. Recommendations: For version 9.1.2u.6134 B20201202, avoid using the ip parameter in the...

SUSE-SU-2022:2846-1 Security update for zlib

This update for zlib fixes the following issues: - CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field bsc1202175...

PT-2022-22929 · Nordic · Nordic Nrf5 Sdk For Mesh

Name of the Vulnerable Software and Affected Versions: Nordic nRF5 SDK for Mesh version 5.0 Description: A heap overflow issue can be triggered by sending a series of segmented control packets and access packets with the same SeqAuth. Recommendations: For Nordic nRF5 SDK for Mesh version 5.0,...

PT-2022-22904 · Tenda · Tenda W6

Name of the Vulnerable Software and Affected Versions: Tenda W6 version 1.0.0.94122 Description: A stack overflow issue exists, which can be exploited to cause a denial of service DoS via the index parameter in the "/goform/wifiSSIDset" API endpoint. Recommendations: For Tenda W6 version...

GSD-2022-1004851 net: stmmac: fix dma queue left shift overflow issue

net: stmmac: fix dma queue left shift overflow issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.290 by commit...