Huawei HarmonyOS DFX module input validation error vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A vulnerability exists in the Huawei HarmonyOS DFX module due to an input validation error. The vulnerability stems from the presence of improper validation of integrity check values in the DFX module. An attacker could exploit this...

HUAWEI HarmonyOS 资源管理错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. A post-release reuse vulnerability exists in the Huawei HarmonyOS DFX module, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from a confusion in the DFX module's instructions for...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. A vulnerability exists in the Huawei HarmonyOS DFX module due to an input validation error. The vulnerability stems from the presence of improper validation of integrity check values in the DFX module. An attacker could exploit this...

DEBIAN-CVE-2021-3933

An integer overflow could occur when OpenEXR processes a crafted file on systems where sizet 64 bits. This could cause an invalid bytesPerLine and maxBytesPerLine value, which could lead to problems with application stability or lead to other attack paths...

CVE-2021-40064

There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability...

Heap overflow

There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability...

CVE-2021-40064

There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability...

CVE-2021-40064: Out-of-bounds Write

There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability...

SUSE-SU-2022:0441-1 Security update for glibc

glibc was updated to fix the following issues: Security issues fixed: - CVE-2021-3999: Fixed incorrect errno in getcwd bsc1194640 - CVE-2022-23219: Fixed buffer overflow in sunrpc clntcreate for 'unix' bsc1194768 - CVE-2022-23218: Fixed buffer overflow in sunrpc svcunixcreate bsc1194770 Bugs fixe...

SUSE-SU-2021:3658-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 Real Time kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3772: Fixed sctp vtag check in sctpsfootb bsc1190351. - CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may hav...

Have You Considered Your Organization’s Technical Debt?

TL;DR Deal with your dirty laundry. Have you ever skipped doing your laundry and watched as that pile of dirty clothes kept growing, just waiting for you to get around to it? You’re busy, you’re tired and you keep saying you’ll get to it tomorrow. Then suddenly, you realize that it’s been three...

CVE-2019-14075

CVE-2019-14075 is a null pointer dereference in the Snapdragon radio interface layer (sapmodule destructor). Affected products include Qualcomm Snapdragon Auto/Consumer IOT/Industrial IOT/Mobile across listed chips (e.g., SDM6x, SM8x, SDM63x/66x family and related platforms). Root cause: missing ...

SUSE-SU-2020:0334-1 Security update for xen

This update for xen fixes the following issues: - CVE-2020-7211: potential directory traversal using relative paths via tftp server on Windows host bsc1161181. - CVE-2019-19579: Device quarantine for alternate pci assignment methods bsc1157888. - CVE-2019-19581: findnextbit issues bsc1158003. -...

Android Security Bulletin—October 2019Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2019-10-06 or later address all of these issues. To learn how to check a device's security patch level, see Check & update your Android version. Android partners are...

Buffer Overflow Vulnerability in Prime95 Software

prime95 is a dedicated software for testing system stability. A buffer overflow vulnerability exists in the Prime95 software. By failing to check the length of incoming data at the host nmae, an attacker could exploit the vulnerability to execute arbitrary code within the context of the applicati...

Servicing stack update for Windows 10 Version 1809: April 2, 2019

None None...

SUSE-SU-2019:0470-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-18249: Fixed tracking on allocated nid in the addfreenid function fs/f2fs/node.c, which previously allowed local users to cause a denial of service...

SUSE-SU-2019:0414-1 Security update for dovecot23

This update for dovecot23 fixes the following issues: dovecot was updated to 2.3.3 release, bringing lots of bugfixes bsc1124356. Also the following security issue was fixed: - CVE-2019-3814: A vulnerability in Dovecot related to SSL client certificate authentication was fixed bsc1123022 The...

CVE-2018-18070

An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific navigation route might cause the system to freeze and reboot after a few transmissions. When the system next starts, it tries to re-calculate the route,...

SUSE-SU-2018:2150-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 RT kernel was updated to 4.4.139 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-13053: The alarmtimernsleep function had an integer overflow via a large relative timeout because ktimeaddsafe was not used bnc1099924 -...