4264 matches found
Out-of-bounds Read
Cap'n Proto is a data interchange format and remote procedure call RPC system. Cap'n Proro prior to versions 0.7.1, 0.8.1, 0.9.2, and 0.10.3, as well as versions of Cap'n Proto's Rust implementation prior to 0.13.7, 0.14.11, and 0.15.2 is vulnerable to out-of-bounds read due to logic error handli...
Design/Logic Flaw
An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure...
PT-2022-6503 · Wind River · Vxworks
Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.9 through 7 Description: The issue allows a specifically crafted packet sent by a Radius server to cause Denial of Service during the IP Radius access procedure. This is related to the execution of a loop with an...
The vulnerability of the Advanced Local Procedure Call (ALPC) handler in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Advanced Local Procedure Call ALPC in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...
xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access
A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the request length...
CVE-2022-21599
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
RLSA-2022:8400 Moderate: libtirpc security update
The libtirpc packages contain SunLib's implementation of transport-independent remote procedure call TI-RPC documentation, which includes a library required by programs in the nfs-utils and rpcbind packages. Security Fixes: libtirpc: DoS vulnerability with lots of connections CVE-2021-46828 For...
The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.
The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Advanced Local Procedure Call (ALPC) handler in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Advanced Local Procedure Call ALPC in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Moderate: libtirpc security update
The libtirpc packages contain SunLib's implementation of transport-independent remote procedure call TI-RPC documentation, which includes a library required by programs in the nfs-utils and rpcbind packages. Security Fixes: libtirpc: DoS vulnerability with lots of connections CVE-2021-46828 For...
Denial Of Service (DoS)
rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Stored Procedure component, allowing an attacker to crash the application by providing a maliciously crafted input through the multiple protocols...
Denial Of Service (DoS)
rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: Stored Procedure component in the library, allowing attacker to cause an application crash through the multiple protocols...
CVE-2022-41100
Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...
CVE-2022-41093
Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...
CVE-2022-41045
Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...
CVE-2022-41100
Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...
CVE-2022-41093
Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...
CVE-2022-41045
Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...
UBUNTU-CVE-2022-38023
Netlogon RPC Elevation of Privilege Vulnerability...
The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
...