CLSA-2022-1652706426 Fixed CVE-2022-24903 in rsyslog

CVE-2022-24903: fix potential buffer overrun when using octet-counted framing...

CVE-2022-28262

CVE-2022-28262 affects Adobe Acrobat Reader DC (and related Acrobat/Reader builds) where parsing a crafted file can trigger an out-of-bounds read, potentially allowing bypass of mitigations such as ASLR. Affected versions include Acrobat Reader DC 22.001.2011x and earlier, 20.005.3033x and earlie...

kernel: DoS in sctp_addto_chunk in net/sctp/sm_make_chunk.c

A flaw was found in the sctpmakestrresetreq function in net/sctp/smmakechunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUGON issue, leading to a denial of service DOS...

kernel: DoS in sctp_addto_chunk in net/sctp/sm_make_chunk.c

A flaw was found in the sctpmakestrresetreq function in net/sctp/smmakechunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUGON issue, leading to a denial of service DOS...

CVE-2022-24903 Buffer overflow in TCP syslog server (receiver) components in rsyslog

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...

CVE-2022-25785 Buffer overrun

Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affects: Secomea SiteManager all versions prior to 9.7...

SUSE-SU-2022:1512-1 Security update for ruby2.5

This update for ruby2.5 fixes the following issues: - CVE-2022-28739: Fixed a buffer overrun in String-to-Float conversion bsc1198441. - CVE-2021-41817: Fixed a regular expression denial of service in Date Parsing Methods bsc1193035. - CVE-2021-32066: Fixed a StartTLS stripping vulnerability in...

SUSE: Security Advisory (SUSE-SU-2022:1512-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

njs Array Prototype Concat DoS

The vulnerability of the Array.prototype.concat function in the njs interpreter on the nginx server is related to the execution of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

FreeBSD : eb -- Potential buffer overrun vulnerability (17a30a24-c579-11ec-bbbd-0800270512f4)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 17a30a24-c579-11ec-bbbd-0800270512f4 advisory. - Kazuhiro Ito reports: Potential buffer overrun vulnerability is found in eb/multiplex.c...

Linux TIPC Privilege Escalation

The vulnerability of the Linux operating system’s TIPC network protocol implementation net/tipc/monitor.c is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures or increase their privileges through a...

eb -- Potential buffer overrun vulnerability

Kazuhiro Ito reports: Potential buffer overrun vulnerability is found in eb/multiplex.c...

Adobe Illustrator Buffer Overflow Info Disclosure

The vulnerability of Adobe Illustrator’s graphic editor arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to protected information through a specially crafted PDF file...

Adobe Illustrator Buffer Overflow Info Disclosure

The vulnerability of Adobe Illustrator’s graphic editor arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to protected information through a specially crafted PDF file...

Adobe Illustrator Buffer Overflow Info Disclosure

The vulnerability of Adobe Illustrator’s graphic editor arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to protected information through a specially crafted PDF file...

GSD-2022-1001238 rtw88: fix memory overrun and memory leak during hw_scan

rtw88: fix memory overrun and memory leak during hwscan This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-29511

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17 through v5.17.1 Description The issue is related to a memory overrun and memory leak during the hw scan process. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

Slackware: Security Advisory (SSA:2017-223-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2022-103-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2020-176-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...