CVE-2023-3043

CVE-2023-3043 affects AMI MegaRAC SPx BMC, where a stack-based buffer overflow can be triggered over an adjacent network. The vulnerability in the SPx firmware could lead to confidentiality, integrity, and availability losses. Reported CVSS vectors indicate high to critical impact (CVSS v3.1: AV:...

CVE-2023-34332

CVE-2023-34332 covers a vulnerability in AMI’s MegaRAC SPx BMC. The issue allows an attacker on the local network to cause an untrusted pointer to dereference, potentially compromising confidentiality, integrity, and availability. Effectively, the BMC firmware component and its handling of pointe...

AMI MegaRAC SPx Buffer Error Vulnerability

AMI MegaRAC is a family of service processor products from AMI. Provides complete out-of-band or unlit remote management of computer systems independent of operating system state or location to troubleshoot computers and ensure service continuity. A security vulnerability exists in the AMI MegaRA...

Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2024-1904)

The version of java-1.8.0-openjdk installed on the remote host is prior to 1.8.0.392.b08-2.82. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1904 advisory. Vulnerability in Oracle Java SE component: CORBA. Supported versions that are affected are Oracle Jav...

PT-2024-1585 · Ami · Ami Megarac Sp-X

Name of the Vulnerable Software and Affected Versions: AMI MegaRAC SP-X affected versions not specified Description: The issue is related to a heap memory corruption vulnerability in the BMC of AMI MegaRAC SP-X. This vulnerability can be exploited by an attacker via an adjacent network, potential...

Amazon Linux AMI : kernel (ALAS-2024-1899)

The version of kernel installed on the remote host is prior to 4.14.334-177.552. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1899 advisory. 2024-07-03: CVE-2023-52813 was added to this advisory. 2024-06-07: CVE-2023-52881 was added to this advisory...

Amazon Linux AMI : xorg-x11-server (ALAS-2024-1900)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1900 advisory. A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privile...

Amazon Linux AMI : golang (ALAS-2024-1903)

The version of golang installed on the remote host is prior to 1.20.12-1.49. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1903 advisory. A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read ma...

AMI MegaRAC Buffer Error Vulnerability

AMI MegaRAC is a family of service processor products from AMI. Provides complete out-of-band or unlit remote management of computer systems independent of operating system state or location to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRAC. A...

AMI MegaRAC SPx Buffer Error Vulnerability

AMI MegaRAC is a family of service processor products from AMI. Provides complete out-of-band or unlit remote management of computer systems independent of operating system state or location to troubleshoot computers and ensure service continuity. A security vulnerability exists in the AMI MegaRA...

Amazon Linux AMI : squid (ALAS-2024-1901)

The version of squid installed on the remote host is prior to 3.5.20-17.53. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1901 advisory. Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a...

duffystavernami.com Cross Site Scripting vulnerability OBB-3819442

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Amazon Linux AMI : openssh (ALAS-2023-1898)

The version of openssh installed on the remote host is prior to 7.4p1-22.81. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1898 advisory. AWS is aware of CVE-2023-48795, also known as Terrapin, which is found in the SSH protocol and affects SSH channel integrity. A...

Asterisk Multiple Vulnerabilities (Dec 2023)

Asterisk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk"; if description...

CVE-2023-39538

CVE-2023-39538 concerns AMI AptioV BIOS where an attacker with local access can trigger an unrestricted upload of a BMP Logo file deemed dangerous, potentially affecting confidentiality, integrity, and availability. The vulnerability stems from BMP logo handling in AMI AptioV BIOS and has been di...

CVE-2023-39538 Failure when uploading a Logo image file

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

CVE-2023-39539 Failure when uploading a Logo image file

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

CVE-2023-39539 Failure when uploading a Logo image file

AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...

CVE-2023-39539

CVE-2023-39539 corresponds to a vulnerability in AMI AptioV BIOS where a user with local access can trigger an unrestricted upload of a PNG logo file (via the BMP Logo Handler) with a dangerous type. The underlying issue is described as a local elevation/impactful modification of boot-time/logo h...

Amazon Linux AMI : vim (ALAS-2023-1893)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1893 advisory. Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file...