4149 matches found
CVE-2021-3697
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerabili...
CVE-2021-3697
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerabili...
CVE-2021-3695
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an...
CVE-2021-3695
CVE-2021-3695 affects grub2. A crafted 16-bit grayscale PNG image can cause an out-of-bounds write in grub2 heap, leading to heap data corruption and potentially arbitrary code execution, bypassing secure boot protections. The vulnerability requires heap-layout triage and the written values are r...
CVE-2021-3695
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an...
CVE-2021-3695
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an...
SUSE-SU-2022:2310-1 Security update for s390-tools
This update of s390-tools fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...
SUSE-SU-2022:2287-1 Security update for fwupdate
This update of fwupdate fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...
PT-2022-37480
Name of the Vulnerable Software and Affected Versions oracleasm affected versions not specified Description The issue is related to the grub2 boothole 3 issues, which necessitated a rebuild of oracleasm with a new secure boot key. Recommendations At the moment, there is no information about a new...
PT-2022-37479
Name of the Vulnerable Software and Affected Versions oracleasm affected versions not specified Description The issue is related to the grub2 boothole 3 issues, which requires a rebuild with a new secure boot key. Recommendations At the moment, there is no information about a newer version that...
CVE-2021-3697: Out-of-bounds Write
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerabili...
SUSE: Security Advisory (SUSE-SU-2022:2274-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2022:2272-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2022:2267-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2022:2265-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-3695: Out-of-bounds Write
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code execution and circumvent secure boot protections. This issue has a high complexity to be exploited as an...
PT-2022-37477
Name of the Vulnerable Software and Affected Versions fwupdate affected versions not specified Description The issue is related to the grub2 boothole 3 problem, which necessitated a rebuild of fwupdate with a new secure boot key. Recommendations At the moment, there is no information about a newe...
SUSE-SU-2022:2274-1 Security update for dpdk
This update of dpdk fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues bsc1198581...
SUSE-SU-2022:2273-1 Security update for dpdk
This update for dpdk fixes the following issues: - CVE-2021-3839: Fixed a memory corruption issue during vhost-user communication bsc1198963. - CVE-2022-0669: Fixed a denial of service that could be triggered by a vhost-user master bsc1198964. - rebuild with new secure boot key due to grub2...