PT-2023-35265

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.164 Description The issue is related to an overflow before widen in the bitmap ip create function in the ipset module of the netfilter component. The actual impact and attack plausibility have not yet been...

Microsoft Windows win32kfull Bitmap Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

Amazon Linux 2 : autotrace, autotrace-devel (ALAS-2023-1929)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1929 advisory. Heap-based buffer overflow in the pstoeditsuffixtableinit function in output-pstoedit.c in AutoTrace 0.31.1 allows remote attackers to cause a denial of service out-of-bounds write via a crafted...

Medium: autotrace

Issue Overview: Heap-based buffer overflow in the pstoeditsuffixtableinit function in output-pstoedit.c in AutoTrace 0.31.1 allows remote attackers to cause a denial of service out-of-bounds write via a crafted bmp image file. CVE-2016-7392 A biWidthbiBitCnt integer overflow in input-bmp.c in...

GSD-2023-1001817 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.

netfilter: ipset: Fix overflow before widen in the bitmapipcreate function. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.229 by commit...

PT-2023-34918 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.303 Description: The issue is related to an overflow before widen in the bitmap ip create function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-34836 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.89 Description: The issue is related to an overflow before widen in the bitmap ip create function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

GSD-2023-1001331 drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()

drivers/md/md-bitmap: check the return value of mdbitmapgetcounter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001258 md/bitmap: Fix bitmap chunk size overflow issues

md/bitmap: Fix bitmap chunk size overflow issues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000893 md/bitmap: Fix bitmap chunk size overflow issues

md/bitmap: Fix bitmap chunk size overflow issues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000431 md/bitmap: Fix bitmap chunk size overflow issues

md/bitmap: Fix bitmap chunk size overflow issues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

PT-2023-33970

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue is related to bitmap chunk size overflow in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2023-34335

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to bitmap chunk size overflow problems. The actual impact and potential for attacks have not been confirmed yet. Recommendations For Linux Kernel versions prior to...

PT-2023-33508 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to bitmap chunk size overflow. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.0.18, update to...

PT-2023-33650

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to the md bitmap get counter function in the Linux Kernel. It is noted that the return value of this function should be checked. The actual impact and potential for attack...

PT-2023-34082

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to the md bitmap get counter function in the Linux Kernel. It is noted that the return value of this function should be checked. The actual impact and potential for attac...

PT-2023-34408

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the md bitmap get counter function in the Linux Kernel. It is noted that the return value of this function should be checked. The actual impact and potential for atta...

PT-2023-2177 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a logic error in the code of BitmapExport.java, which may cause a failure to truncate images. This can potentially allow an attacker to recover cropped or edited...

libreoffice:lwpfuzzer: Stack-buffer-overflow in vcl::bitmap::CreateFromData

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6051587493855232 Project: libreoffice Fuzzing Engine: honggfuzz Fuzz Target: lwpfuzzer Job Type: honggfuzzasanlibreoffice Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash...

PT-2023-36723

Уязвимость функции bitmap ip create модуля net/netfilter/ipset/ip set bitmap ip.c компонента netfilter ядра операционной системы Linux связана с использованием недостаточно случайных значений. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...