208 matches found
UBUNTU-CVE-2023-39356
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a missing offset validation may lead to an Out Of Bound Read in the function gdimultiopaquerect. In particular there is no code to validate if the value...
UBUNTU-CVE-2023-41360
An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c can read the initial byte of the ORF header in an ahead-of-stream situation...
PT-2023-35981 · Hdf5 · Hdf5
Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified, which can cause a crash. The crash occurs in the following functions: H5O chunk protect, H5O chunk delete, H5O cont delete...
PT-2023-35870 · Git +1 · Ntopng
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash occurs in the NetworkInterface::dissectPacket function, as...
PT-2023-35824 · Git +1 · Wireshark
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue. The crash state involves several functions: wmem tree lookup32 array le, dissect btl2cap, and call dissect...
OSV-2023-312 UNKNOWN READ in udev_rule_parse_value
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57950 Crash type: UNKNOWN READ Crash state: udevruleparsevalue fuzz-udev-rule-parse-value.c centipede::RunOneInput...
PT-2023-35774 · Git +1 · Systemd
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash was reported due to an unknown read issue. The crash state includes a reference to memdup suffix0 and fuzz-efi-string.c, indicating a potential...
PT-2023-35764 · Git +1 · Systemd
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash was reported due to an unknown read issue. The crash occurred in the sd event new function, within the fuzz-lldp-rx.c file, and was triggered by...
Adobe Dimension 缓冲区错误漏洞
Adobe Dimension is a suite of 2D and 3D compositing design tools from Adobe. A buffer error vulnerability exists in Adobe Dimension version 3.4.8, which stems from an out-of-bounds read issue...
PT-2023-12649 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to a possible incorrect file read due to a confused deputy in the isBluetoothShareUri function of BluetoothOppUtility.java. This could lead to local information...
PT-2023-35703 · Git +1 · Mruby
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash state includes mrb exc get id, mrb no method error, and mrb method missing. No information is available...
PT-2023-35696 · Git +1 · Wireshark
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue. The crash state involves several functions: dissect oran c section, dissect oran, and call dissector work...
PT-2023-35684 · Git +1 · Wireshark
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue. The crash state involves several functions: dissect oran c section, dissect oran, and call dissector work...
CVE-2022-41862
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes...
PT-2023-5351 · Libtiff +8 · Libtiff +8
Name of the Vulnerable Software and Affected Versions: LibTIFF version 4.4.0 Description: The issue is related to an out-of-bounds read in the tiffcrop function in tools/tiffcrop.c at line 3400, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. The...
PT-2023-1659 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to a flaw in the Linux Kernel, specifically with the tun/tap sockets having their socket UID hardcoded to 0 due to a type confusion in their initialization functio...
PT-2023-14452 · Lenovo · Thinkpad X13S Bios Driver
Name of the Vulnerable Software and Affected Versions: ThinkPadX13s BIOS driver affected versions not specified Description: A buffer over-read issue was reported in the ThinkPadX13s BIOS driver, potentially allowing a local attacker with elevated privileges to cause information disclosure...
PT-2022-36760 · Git +1 · Mruby
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurred due to an unknown read issue. The crash state includes functions such as pack unpack, mrb pack unpack, and mrb vm exec. Recommendations: At the moment, there is no...
PT-2022-36684 · Git +1 · Mapserver
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurred due to an unknown read issue. The crash state includes functions such as loadSymbol, loadMapInternal, and msLoadMap. Recommendations: At the moment, there is no...