Postgresql: buffer overrun from integer overflow in array modification

...

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Vulnerability of modules for supporting and implementing ICMP, TCP, SNMP, DHCP, NAT, and FTP network stack in Azure RTOS NetX Duo, allowing a hacker to execute arbitrary code or cause service failure.

Vulnerability of modules for supporting and implementing ICMP, TCP, SNMP, DHCP, NAT, and FTP network stack in Azure RTOS NetX Duo arises due to the operation of writing data beyond the buffer limit in memory, as a result of the pointer being set to an expired one. Exploitation of this vulnerabili...

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: Buffer overrun from integer overflow in array modification CVE-2023-5869 postgresql: Memory disclosure in aggregate function calls CVE-2023-5868 postgresql: extension script @substitutions@...

ALSA-2023:7714 Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: Buffer overrun from integer overflow in array modification CVE-2023-5869 postgresql: Memory disclosure in aggregate function calls CVE-2023-5868 postgresql: extension script @substitutions@...

CVE-2023-5869 Postgresql: buffer overrun from integer overflow in array modification

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing...

Important: Red Hat Security Advisory: postgresql:13 security update

An update for the postgresql:13 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated...

postgresql: Buffer overrun from integer overflow in array modification

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing...

postgresql:13 security update

An update is available for pgrepack, module.pgaudit, postgres-decoderbufs, module.pgrepack, module.postgres-decoderbufs, pgaudit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

RLSA-2023:7581 Important: postgresql:13 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: Buffer overrun from integer overflow in array modification CVE-2023-5869 postgresql: Memory disclosure in aggregate function calls CVE-2023-5868 postgresql: extension script @substitutions@...

postgresql: Buffer overrun from integer overflow in array modification

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing...

Important: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as...

The vulnerability of the microprogrammed software of Zyxel ATP network devices, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, and VPN, arises from the execution of operations beyond the buffer limits in memory. This allows attackers to cause service failures.

The vulnerability of the microprogrammed software in Zyxel ATP, USG FLEX, USG FLEX 50W, USG20W-VPN, and VPN network devices is related to the operation of writing data outside the buffer in memory during the processing of the sdwanifaceipc file. Exploiting this vulnerability can allow a malicious...

The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector lies in the possibility of an operation being executed outside the buffer in memory, allowing a hacker to exploit this privilege.

The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the CNCSoft-B software and DOPSoft software lies in the possibility of an operation being executed outside the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of CNCSoft-B and DOPSoft software lies in the execution of operations beyond the buffer limits in memory when processing DPA files. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially created malicious file or a specially created...

The vulnerability of the sub_48AF78 function in D-Link DIR878 router microprogramming software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the sub48AF78 function in D-Link DIR878 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

Important: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

The vulnerability in the SParse_uniprop_string function of the regcomp.c file in the Perl programming language interpreter allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SParseunipropstring function in the regcomp.c file of the Perl interpreter is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the nvme_add_user_metadata() function in the drivers/nvme/host/ioctl.c file of the NVMe driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nvmeaddusermetadata function in the drivers/nvme/host/ioctl.c file of the Linux NVMe driver kernel relates to access beyond the reserved buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...