7170 matches found
Moderate: keepalived security update
The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server IPVS kernel module providing layer-4 transport layer load balancing. Keepalived implements a set of checke...
CVE-2024-39750
CVE-2024-39750 affects IBM Analytics Content Hub 2.0. The vulnerability is a buffer overflow caused by improper return length checking, which could allow a remote authenticated attacker to overflow a buffer and execute arbitrary code or crash the server. Remediation: upgrade IBM Analytics Content...
CVE-2024-50698
SunGrow WiNet-SV200.001.00.P027 and earlier versions is vulnerable to heap-based buffer overflow due to bounds checks of the MQTT message content...
CVE-2022-47090
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b contains a buffer overflow in gfvvcreadppsbsinternal function of mediatools/avparsers.c, check needed for numexptilecolumns...
CVE-2024-55192
OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIOv310::farmhash::inlined::Fetch64char const...
Buffer overflow vulnerability in the schedEndTime parameter of the Tenda AC8 setSchedWifi function
Tenda AC8 is a wireless router from Tenda, a Chinese company. Tenda AC8 suffers from a buffer overflow vulnerability that originates from the failure of the schedEndTime parameter of the setSchedWifi function in the file /goform/openSchedWifi to correctly validate the length size of the input dat...
Buffer overflow vulnerability in the schedEndTime parameter of the Tenda AC8 setSchedWifi function
Tenda AC8 is a wireless router from Tenda, a Chinese company. Tenda AC8 suffers from a buffer overflow vulnerability, which originates from the failure of the schedStartTime parameter of the setSchedWifi function in file /goform/openSchedWifi to correctly validate the length of the input data,...
CVE-2023-36998
The NextEPC MME = 1.0.1 fixed in commit a8492c9c5bc0a66c6999cb5a263545b32a4109df contains a stack-based buffer overflow vulnerability in the Emergency Number List decoding method. An attacker may send a NAS message containing an oversized Emergency Number List value to the MME to overwrite the...
CVE-2023-36998
The CVE-2023-36998 entry concerns NextEPC MME
ROS-20250122-02
A vulnerability in the USB component of the Linux kernel is related to incorrect input validation in the usbparseendpoint function in drivers/usb/core/config.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the cachefiles component of th...
CVE-2024-57545
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field hiddendhcpnum is copied to the stack without length verification...
CVE-2024-57543
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field dhcpstartip is copied to the stack without length verification...
CVE-2024-57538
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field anonymousprotectstatus is copied to the stack without length verification...
CVE-2024-57537
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field page is copied to the stack without length verification...
CVE-2024-57538
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field anonymousprotectstatus is copied to the stack without length verification...
CVE-2024-57541
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field ipv6protectstatus is copied to the stack without length verification...
CVE-2024-24419
The Red Hat and associated feeds confirm a buffer overflow in Magma core: Linux Foundation Magma
CVE-2024-57541
CVE-2024-57541 affects Linksys E8450 router firmware v1.2.00.360516. The vulnerability is a buffer overflow caused by copying the ipv6_protect_status field to the stack without length verification. Impact details from sources indicate low to moderate severity (CVSSv3.1: 5.5; ADJACENT attack vecto...
Debian dla-4023 : libebml-dev - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4023 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4023-1 [email protected] https://www.debian.org/lts/security/...