Linux kernel BPF verifier Stack Overflow

The vulnerability of the checkstackslotwithinbounds function in the kernel/bpf/verifier.c module of the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux PowerPC PSeries Kernel Driver Heap Buffer Overflow DoS

The vulnerability of the dlparmemoryremovebyindex function in the Linux operating system’s PowerPC PSeries kernel memory driver relates to reading memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Zephyr Bluetooth Host Component Buffer Overflow

The vulnerability in the /subsys/bluetooth/host/hcicore.c component of the real-time Bluetooth subsystem of the Zephyr operating system relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

Simcenter Femap Buffer Overflow RCE

The vulnerability of the Simcenter Femap simulation application lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by allowing the user to open a specially crafted Catia MODEL file...

NPort W2150A W2250A DoS

The vulnerability of the microprogrammed software routers NPort W2150A and W2250A lies in the reading of data outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure by sending a specially crafted web request remotely...

squid: Buffer over-read in the HTTP Message processing feature

A buffer over-read flaw was found in Squid's HTTP Message processing feature. This issue may allow attackers to perform remote denial of service...

RHEL 9 : squid (RHSA-2024:1153)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1153 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid: DoS against...

UBUNTU-CVE-2024-31081

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

UBUNTU-CVE-2024-31082

A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

PT-2024-2942

Name of the Vulnerable Software and Affected Versions Xorg-server affected versions not specified Description A heap-based buffer over-read issue was found in the X.org server's ProcAppleDRICreatePixmap function. This occurs when byte-swapped length values are used in replies, potentially leading...

Siemens Tecnomatix Plant Simulation Buffer Overflow Code Execution

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by loading specially crafted PSOBJ files...

Linux kernel cipso_v4_map_lvl_valid Buffer Overflow

The vulnerability of the cipsov4maplvlvalid function in Linux kernel relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

UBUNTU-CVE-2024-31080

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

PT-2024-21837 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a maliciou...

Linux SMB Client Heap Buffer Overflow DoS

The vulnerability of the smb2parsecontexts function in the fs/smb/client/smb2pdu.c module of the SMB client kernel for Linux operating systems is related to reading memory beyond the boundaries of the allocated buffer. Exploiting this vulnerability could allow an attacker to gain access to...

Linux PCI Kernel Component Heap Buffer Overflow DoS

The vulnerability of the pcidevforeachresource function in the Linux operating system’s PCI core component is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause...

PT-2024-3829

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Linux affected versions not specified Description The issue is related to a buffer management error, where an attacker may access a memory location after the end of the buffer. A successful exploit of this issue m...

Wireshark dissect_bgp_open() DoS

The vulnerability of the dissectbgpopen function in the Wireshark network traffic analyzer is related to the operation that occurs outside the buffer in memory when processing extended BGP parameter formats. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

TCP-IP Libslirp Heap Buffer Overflow

The vulnerability of the src/ncsi.c component of the TCP-IP Libslirp emulator is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...

slirp.c Component Confidential Data Access

The vulnerability of the slirp.c component in the Libslirp TCP-IP emulator involves reading data beyond the allowable buffer size. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...