Lucene search
K

597 matches found

RedhatCVE
RedhatCVE
added 2022/07/25 7:22 a.m.61 views

CVE-2022-35737

An array-bounds overflow vulnerability was discovered in SQLite. The vulnerability occurs when handling an overly large input passed as a string argument to some of the C-language APIs provided by SQLite. This flaw allows a remote attacker to pass specially crafted large input to the application...

5.9CVSS4.9AI score0.11431EPSS
Exploits2References5
OSV
OSV
added 2022/06/28 7:58 p.m.8 views

GSD-2022-1003884 eth: tg3: silence the GCC 12 array-bounds warning

eth: tg3: silence the GCC 12 array-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2022/06/28 7:29 p.m.8 views

GSD-2022-1003583 eth: tg3: silence the GCC 12 array-bounds warning

eth: tg3: silence the GCC 12 array-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2022/06/28 7:8 p.m.9 views

GSD-2022-1003364 eth: tg3: silence the GCC 12 array-bounds warning

eth: tg3: silence the GCC 12 array-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2022/06/28 6:41 p.m.7 views

GSD-2022-1003064 eth: tg3: silence the GCC 12 array-bounds warning

eth: tg3: silence the GCC 12 array-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

7.2AI score
Exploits0
Ubuntu
Ubuntu
added 2022/05/26 5:17 p.m.65 views

USN-5448-1: ncurses vulnerabilities

It was discovered that ncurses was not properly checking array bounds when executing the fmtentry function, which could result in an out-of-bounds write. An attacker could possibly use this issue to execute arbitrary code. CVE-2017-10684 It was discovered that ncurses was not properly checking us...

9.8CVSS7.4AI score0.04876EPSS
Exploits8
RedHat Linux
RedHat Linux
added 2022/05/10 1:58 p.m.1 views

kernel: an array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c

An improper validation of an array index and out of bounds memory read in the Linux kernel's Integrated Services Digital Network ISDN functionality was found in the way users call ioctl CMTPCONNADD. A local user could use this flaw to crash the system or starve the resources causing denial of...

5.5CVSS6.6AI score0.00674EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2022/05/10 1:43 p.m.2 views

kernel: an array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c

An improper validation of an array index and out of bounds memory read in the Linux kernel's Integrated Services Digital Network ISDN functionality was found in the way users call ioctl CMTPCONNADD. A local user could use this flaw to crash the system or starve the resources causing denial of...

5.5CVSS6.6AI score0.00674EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2022/04/29 12:0 a.m.38 views

IBM Java 7.0 < 7.0.10.50 / 7.1 < 7.1.4.50 / 8.0 < 8.0.5.40 Multiple Vulnerabilities

The version of IBM Java installed on the remote host is prior to 7.0 7.0.10.50 / 7.1 7.1.4.50 / 8.0 8.0.5.40. It is, therefore, affected by multiple vulnerabilities as referenced in the IBM Security Update July 2019 advisory. - Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on...

9.8CVSS7.9AI score0.02098EPSS
Exploits0References9
NVD
NVD
added 2022/02/04 11:15 p.m.26 views

CVE-2022-23561

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive...

8.8CVSS0.00531EPSS
Exploits0References2
OSV
OSV
added 2022/02/04 9:15 p.m.0 views

DEBIAN-CVE-2021-46671

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client...

5.3CVSS6.4AI score0.01335EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.29 views

Mageia: Security Advisory (MGASA-2019-0241)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8CVSS6AI score0.04472EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2022/01/20 12:0 a.m.7 views

PT-2022-5915 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16-rc6 Description: The issue is related to the lkdtm ARRAY BOUNDS function in the drivers/misc/lkdtm/bugs.c module of the Linux kernel. It lacks a check of the return value of kmalloc and will cause a null...

9.8CVSS7.2AI score0.67994EPSS
Exploits193References949
SQLite
SQLite
added 2022/01/01 12:0 a.m.48 views

SQLite report about CVE-2022-35737

This bug is an array-bounds overflow. The bug is only accessible when using some of the C-language APIs provided by SQLite. The bug cannot be reached using SQL nor can it be reached by providing SQLite with a corrupt database file. The bug only comes up when very long string inputs greater than 2...

7.5CVSS7.8AI score0.11431EPSS
Exploits2Affected Software1
OSV
OSV
added 2021/12/19 7:35 p.m.9 views

GSD-2021-1002392 net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound

net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.257 by...

7.2AI score
Exploits0
Microsoft CVE
Microsoft CVE
added 2021/11/10 8:0 a.m.2 views

An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c.

...

5.5CVSS7AI score0.00674EPSS
Exploits1
OSV
OSV
added 2021/11/04 7:15 p.m.3 views

AZL-6604 CVE-2021-43389 affecting package kernel for versions less than 5.10.78.1-1

An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c...

5.5CVSS6.7AI score0.00674EPSS
Exploits1References1
OSV
OSV
added 2021/11/04 7:15 p.m.1 views

DEBIAN-CVE-2021-43389

An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c...

5.5CVSS6.4AI score0.00674EPSS
Exploits1References1
OSV
OSV
added 2021/11/04 7:15 p.m.1 views

UBUNTU-CVE-2021-43389

An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c...

5.5CVSS6.7AI score0.00674EPSS
Exploits1References15
CNNVD
CNNVD
added 2021/10/28 12:0 a.m.2 views

Huawei Smartphone 安全漏洞

Huawei Emui is a mobile operating system developed based on Android.Magic Ui is a mobile operating system developed based on Android. A security vulnerability exists in Huawei Emui and Magic UI, which can be exploited by an attacker to attempt to read an out-of-range array...

5.3CVSS5.9AI score0.00541EPSS
Exploits0References2
Rows per page
Query Builder