OESA-2025-1700 postgresql security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

OESA-2025-1698 postgresql security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

Cisco Secure Endpoint ClamAV DoS (cisco-sa-clamav-udf-hmwd9nDy)

According to its self-reported version, Cisco Secure Endpoint Connector for ClamAV is affected by a vulnerability. - A vulnerability in Universal Disk Format UDF processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device...

VulnCheck KEV: CVE-2025-5777

Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy OR AAA virtual server...

CVE-2025-6657

PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

CVE-2025-6649

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2025-2784: Fixed Heap buffer over-read in skipinsignificantspace when sniffing content bsc1240750 CVE-2025-32050:Fixed Integer overflow in appendparamquoted bsc1240752 CVE-2025-32051:Fixed Segmentation fault when parsing malformed data URI...

SUSE-SU-2025:20446-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2025-2784: Fixed Heap buffer over-read in skipinsignificantspace when sniffing content bsc1240750 - CVE-2025-32050:Fixed Integer overflow in appendparamquoted bsc1240752 - CVE-2025-32051:Fixed Segmentation fault when parsing malformed data...

Linux kernel I3C DMA Overflow DoS

Vulnerability of the hcidmairqhandler function in the drivers/i3c/master/mipi-i3c-hci/dma.c module – The I3C driver support in the Linux kernel is vulnerable due to buffer out-of-buffer reading. Exploiting this vulnerability could allow an attacker to cause a system failure...

PDF Buffer Overflow

The vulnerability of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2024, Acrobat 2020, and Acrobat Reader 2020 is related to reading data beyond the buffer memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the ioapicwriteindirect function in the arch/x86/kvm/ioapic.c module of the virtualization subsystem on the Linux operating system’s x86 kernel platform is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a servic...

Linux arch/s390/kernel/ptrace.c Heap Buffer Overflow DoS

The vulnerability of the pokeuser function in the arch/s390/kernel/ptrace.c module of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access protected information or cause service interruptions...

Medium: postgresql

Issue Overview: Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5...

Linux kernel Macro Rtw89_for_each_in_txpwr_conf Data Compromise

The vulnerability of the macro definition rtw89foreachintxpwrconf in the drivers/net/wireless/realtek/rtw89/core.h file of the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility...

Linux kernel MPTCP Buffer Overflow DoS

The vulnerability of the mptcpgetoptions function in the net/mptcp/options.c module, which implements networking functions in the Linux kernel, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux tb_retimer_scan() Buffer Overflow DoS

The vulnerability of the tbretimerscan function in the drivers/thunderbolt/retimer.c module of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

Linux drivers net ethernet intel ice ice_sriov_set_msix_vec_count Heap Buffer Overflow

The vulnerability of the icesriovsetmsixveccount function in the drivers/net/ethernet/intel/ice/icesriov.c file of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibili...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rtw89macc2hmrcfunc function in the drivers/net/wireless/realtek/rtw89/mac.h file of the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

Micronas PCI Express Card Driver Heap Overflow DoS

The vulnerability of the ngenecommandconfigfreebuf function in the drivers/media/pci/ngene/ngene-core.c file of Micronas PCI Express card adapters related to Linux operating systems involves reading beyond the buffer’s boundaries. Exploiting this vulnerability can allow an attacker to cause a...

Linux SCSI fc_rport_prli_resp Buffer Overflow

Vulnerability of the fcrportprliresp function in the drivers/scsi/libfc/fcrport.c module – The Linux system’s SCSI device support driver involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of...