Advisory ROSA-SA-2021-1808

Software: binutils 2.27 OS: Cobalt 7.9 CVE-ID: CVE-2017-12448 CVE-Crit: HIGH CVE-DESC: The bfdcacheclose function in bfd / cache.c in the Binary File Descriptor BFD library also known as libbfd distributed in GNU Binutils 2.29 and earlier allows remote attackers to invoke heap usage upon release...

Delta Electronics DOPSoft Buffer Overflow Vulnerability (CNVD-2021-70159)

Delta Electronics DOPSoft is a human-machine interface HMI software from Delta Electronics, Taiwan, China.A buffer error vulnerability exists in Delta Electronics DOPSoft, which stems from the fact that the affected product is vulnerable to out-of-bounds reads and can be exploited by attackers to...

Delta Electronics Industrial Automation DOPSoft 缓冲区错误漏洞

Delta Electronics DOPSoft is a human-machine interface HMI software from Delta Electronics, Taiwan, China.A buffer error vulnerability exists in Delta Electronics DOPSoft, which stems from the fact that the affected product is vulnerable to out-of-bounds reads and can be exploited by attackers to...

Delta Electronics Industrial Automation DOPSoft 缓冲区错误漏洞

Delta Electronics Industrial Automation DOPSoft is a set of human machine interface HMI software from Delta Electronics Taiwan, China. A buffer error vulnerability exists in Delta Electronics Industrial Automation DOPSoft that stems from the affected product's susceptibility to out-of-bounds read...

CVE-2021-22340

There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O read by multiple threads. An attacker with the root permission can exploit this vulnerability by performing some operations. Successful exploitation of this vulnerability may cau...

SUSE SLES15 Security Update : kernel (Live Patch 24 for SLE 15) (SUSE-SU-2021:2057-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2057-1 advisory. This update for the Linux Kernel 4.12.14-15072 fixes several issues. The following security issues were fixed: - CVE-2021-33200: Enforcing...

SUSE-SU-2021:2020-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-19789 fixes several issues. The following issues were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in kernel memory bsc1186484. -...

CVE-2021-32938

Drawings SDK All versions prior to 2022.4 are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allows attackers to cause a denial-of service conditi...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox that originates from a boundary condition when drawing text on a canvas with WebRender disabled. A remote attacker can exploit the vulnerability to...

CVE-2021-25684

It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...

CVE-2021-25684

It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...

CVE-2021-25684 apport can be stalled by reading a FIFO

It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO...

Ubuntu: Security Advisory (USN-4985-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

sensepost gowitness 授权问题漏洞

gowitness is a website screenshot utility program written in Golang. An authorization issue vulnerability exists in sensepost gowitness that stems from a lack of authentication measures in gowitness. Exploitation of this vulnerability allows an unauthenticated attacker to perform arbitrary file...

SUSE: Security Advisory (SUSE-SU-2018:1917-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:2106-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

多款Qualcomm产品缓冲区错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. Intrinsic component that provides the functionality of Qualcomm devices. A security vulnerability exists in Qualcomm products that could result in out-of-bounds reads in DRM due to incorrect buffer length checks. The following...

Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2021-54702)

Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause out-of-bounds reads...

CVE-2021-3490

The eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e "bpf: Fix...

CVE-2021-3490 Linux kernel eBPF bitwise ops ALU32 bounds tracking

The eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e "bpf: Fix...