GSD-2022-1004313 staging: r8188eu: Fix warning of array overflow in ioctl_linux.c

staging: r8188eu: Fix warning of array overflow in ioctllinux.c This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.6 by commit...

GSD-2022-1004311 platform/x86/intel: Fix pmt_crashlog array reference

platform/x86/intel: Fix pmtcrashlog array reference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.6 by commit...

PT-2022-32575

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.18.5 Description The issue is related to an array overflow warning in the ioctl linux.c file of the r8188eu staging driver. The actual impact and attack plausibility have not yet been proven...

PT-2022-32770

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.48 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the r8188eu staging driver. It involves a warning of array overflow in the ioctl linux.c...

PT-2022-23953 · Foxit · Foxit Pdf Editor

Name of the Vulnerable Software and Affected Versions: Foxit PDF Editor version 11.1.1.53537 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

Upgraded Q -> M from 264 [1659038303960]

Judge has assessed an item in Issue 264 as Medium risk. The relevant finding follows: L-05 Unbounded loop on array can lead to DoS As these arrays can grow quite large only push operations, no pop, the transaction's gas cost could exceed the block gas limit and make it impossible to call the...

CLSA-2022-1658856539 Fix CVE(s): CVE-2022-2289, CVE-2022-2304

SECURITY UPDATE: Accessing freed memory with diff put - debian/patches/CVE-2022-2289.patch: Bail out when diff pointer is no longer valid - CVE-2022-2289 SECURITY UPDATE: Spell dump may go beyond end of an array - debian/patches/CVE-2022-2304.patch: Limit the word length - CVE-2022-2304...

Stack overflow

An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is stack buffer overflow in jsonparsearray in mjs.c...

PT-2022-10234

Name of the Vulnerable Software and Affected Versions mjs affected versions not specified Description An issue was discovered in mjs, a Restricted JavaScript engine, specifically in the ES6 version of JavaScript. The problem is a stack buffer overflow in the json parse array function located in...

Cesanta MJS buffer error vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS mJS: Restricted JavaScript engine...

CVE-2022-35737

An array-bounds overflow vulnerability was discovered in SQLite. The vulnerability occurs when handling an overly large input passed as a string argument to some of the C-language APIs provided by SQLite. This flaw allows a remote attacker to pass specially crafted large input to the application...

PT-2022-5232

Name of the Vulnerable Software and Affected Versions SQLite versions 1.0.12 through 3.39.x before 3.39.2 Description The issue is related to an array-bounds overflow in the SQLite API library, which can be triggered by a remote attacker using a long sequence of string data processed by the print...

OESA-2022-1755 nodejs-jsonpointer security update

Simple JSON Addressing. Security Fixes: This affects the package jsonpointer before 5.0.0. A type confusion vulnerability can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays.CVE-2021-23807...

Exploit for CVE-2022-30190

Follina-MSDT-Vulnerability-CVE-2022-30190- Detection and Remed...

Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients

Some components in Apache Kafka use Arrays.equals to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnerability has been...

EulerOS Virtualization 2.10.0 : gnupg2 (EulerOS-SA-2022-2024)

According to the versions of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GnuPG 2.2.21 and 2.2.22 and Gpg4win 3.1.12 has an array overflow, leading to a crash or possibly unspecified other impact, when a...

EulerOS Virtualization 2.10.1 : gnupg2 (EulerOS-SA-2022-2052)

According to the versions of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GnuPG 2.2.21 and 2.2.22 and Gpg4win 3.1.12 has an array overflow, leading to a crash or possibly unspecified other impact, when a...

EulerOS Virtualization 2.10.1 : kernel (EulerOS-SA-2022-2081)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be...

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2022-2024)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

feenominators are set incorrectly through setFee function

Lines of code Vulnerability details Impact feenominators supposed to be updated using the array of indexes i not the current position of array length d Proof of Concept The function updates the fenominatorsx instead of feenominatorsix for uint256 x; x len; if dx MINFEENOMINATOR revert Exception18...