UBUNTU-CVE-2023-3255

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the inflatebuffer function. This could allow a remote authenticated client who is able to send a...

Null pointer dereference

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QE...

kernel: NFSD: Protect against send buffer overflow in NFSv3 READDIR

A buffer management flaw was found in the Linux kernel's NFS server implementation in the NFSv3 READDIR operation handling. A remote client can trigger this issue by crafting an RPC call with an oversized RPC record header, which forces the server to shrink its response buffer allocation. This...

K22541983: BIG-IP virtual servers with Client SSL and HTTP/2 or SPDY configured vulnerability CVE-2017-6163

Security Advisory Description In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when a virtual server uses the standard configuration of HTTP/2 or SPDY profile with Client SSL profile, and the client initiates a...

SUSE CVE-2002-20001

The Diffie-Hellman Key Agreement Protocol allows remote attackers from the client side to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a DHEat or DHEater attack. The client needs very little CPU resources...

SUSE CVE-2021-46671

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client...

Diffie-Hellman Key Agreement Protocol 资源管理错误漏洞

The Diffie-Hellman Key Agreement Protocol is a key negotiation protocol. It was originally described in Diffie and Hellman's seminal paper on public key cryptography. The key negotiation protocol allows Alice and Bob to exchange public key values and securely compute a shared key K based on...

jboss-client: memory leakage in remote client transaction

A flaw was found in the jboss-client. A memory leak on the JBoss client-side occurs when using UserTransaction repeatedly, leading to an information leakage vulnerability...

jboss-client: memory leakage in remote client transaction

A flaw was found in the jboss-client. A memory leak on the JBoss client-side occurs when using UserTransaction repeatedly, leading to an information leakage vulnerability...

jboss-client: memory leakage in remote client transaction

A flaw was found in the jboss-client. A memory leak on the JBoss client-side occurs when using UserTransaction repeatedly, leading to an information leakage vulnerability...

CVE-2022-27668

Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to execute SAProuter administration commands in SAP NetWeaver and ABAP Platform - versions KERNEL 7.49, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.49, KRNL64UC...

jboss-client: memory leakage in remote client transaction

A flaw was found in the jboss-client. A memory leak on the JBoss client-side occurs when using UserTransaction repeatedly, leading to an information leakage vulnerability...

Debian DLA-3028-1 : atftp - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3028 advisory. - options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client. CVE-2021-46671 Note that Nessus...

CVE-2021-42714

Splashtop Remote Client Business Edition through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42713

Splashtop Remote Client Personal Edition through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42714

Splashtop Remote Client Business Edition through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

Directory traversal

Splashtop Remote Client Business Edition through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

Directory traversal

Splashtop Remote Client Personal Edition through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42713

CVE-2021-42713 affects Splashtop Remote Client (Personal Edition) up to version 3.4.6.1. The vulnerability stems from the creation of a Temporary File in a directory with insecure permissions, enabling potential local impact. PT-2022-11668 documents this issue and provides a remediation path: upg...

CVE-2021-42713

Splashtop Remote Client Personal Edition through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permissions...