129 matches found
EUVD-2023-24710
Malicious code in bioql PyPI...
SUSE-SU-2025:20747-1 Security update for net-tools
This update for net-tools fixes the following issues: - Fixed stack buffer overflow in parsehex, procgenfmt, ax25 and netrom bsc1248687 - CVE-2025-46836: Fixed stack buffer overflow caused by the absence of bound checks bsc1243581...
Security update for net-tools
This update for net-tools fixes the following issues: Fixed stack buffer overflow in parsehex, procgenfmt, ax25 and netrom bsc1248687 CVE-2025-46836: Fixed stack buffer overflow caused by the absence of bound checks bsc1243581 Patch Instructions: To install this SUSE update use the SUSE recommend...
Security update for net-tools
This update for net-tools fixes the following issues: Provide more readable error for interface name size checking bsc1243581 Perform bound checks when parsing interface labels in /proc/net/dev bsc1243581, bsc1246608. CVE-2025-46836 Patch Instructions: To install this SUSE update use the SUSE...
SUSE-SU-2025:20566-1 Security update for net-tools
This update for net-tools fixes the following issues: - Provide more readable error for interface name size checking bsc1243581 - Perform bound checks when parsing interface labels in /proc/net/dev bsc1243581, bsc1246608. CVE-2025-46836...
Linux Distros Unpatched Vulnerability : CVE-2025-37749
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ppp: Add bound checking for skb data on pppsynctxmung Ensure we have enough data in linear buffer from skb before accessing initial bytes. This prevents...
PT-2025-18430
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a potential out-of-bounds access in the Linux kernel when processing short packets. Specifically, in the ppp sync txmung function, there is a risk of accessing data...
PYSEC-2025-1
An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions cleanipv6address and...
UBUNTU-CVE-2024-56374
An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and private functions cleanipv6address and...
DEBIAN-CVE-2024-41017
In the Linux kernel, the following vulnerability has been resolved: jfs: don't walk off the end of ealist Add a check before visiting the members of ea to make sure each ea stays within the ealist...
CVE-2021-47609 firmware: arm_scpi: Fix string overflow in SCPI genpd driver
In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Fix string overflow in SCPI genpd driver Without the bound checks for scpipd-name, it could result in the buffer overflow when copying the SCPI device name from the corresponding device tree node as the name...
`serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access
...
GHSA-875G-MFP6-G7F9 `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access
Impact An issue was discovered in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper, which can lead to out of bounds memory accesses. The deserialization does not check that the length stored in the header matches the flexible array lengt...
`serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access
Impact An issue was discovered in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper, which can lead to out of bounds memory accesses. The deserialization does not check that the length stored in the header matches the flexible array lengt...
RUSTSEC-2024-0002 `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access
Impact An issue was discovered in the FamStructWrapper::deserialize implementation provided by the crate for vmmsysutil::fam::FamStructWrapper, which can lead to out of bounds memory accesses. The deserialization does not check that the length stored in the header matches the flexible array lengt...
PT-2023-8768
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's handling of uninitialized stack memory. Privileged programs are supposed to be able to read this memory, but before the patch, these accesses...
PT-2024-14689
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's Berkeley Packet Filter BPF functionality, where the arithmetic for checking stack bounds was done in the 32-bit domain, potentially leading to...
Divide By Zero
libjasper.so is vulnerable to Denial of Service DoS. The vulnerability is due to missing bound checks in the jpcenc.c file, which can result in a divide by zero bug leading to a Denial of Service DoS...
[SECURITY] [DSA 5539-1] node-browserify-sign security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5539-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 30, 2023 https://www.debian.org/security/faq -...