macOS 12.x < 12.5.1 (HT213413)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.5.1 Monterey. It is, therefore, affected by multiple vulnerabilities : - An out-of-bound write issue in Webkit that may lead to arbitrary code execution when processing maliciously crafted web content. CVE-2022-3289...

EulerOS 2.0 SP8 : grub2 (EulerOS-SA-2022-2221)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap dat...

Debian DSA-5202-1 : unzip - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5202 advisory. Sandipan Roy discovered two vulnerabilities in InfoZIP's unzip program, a de-archiver for .zip files, which could result in denial of service or potentially the...

EulerOS Virtualization 2.9.1 : unzip (EulerOS-SA-2022-2191)

According to the versions of the unzip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap o...

CVE-2022-1042

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning...

CVE-2022-1041

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning...

Stack overflow

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning...

CVE-2022-1042 Out-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioning

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning...

CVE-2022-1042

CVE-2022-1042 : The Zephyr Bluetooth Mesh core stack contains an out-of-bounds write vulnerability that can be triggered during provisioning. The connected documents confirm the affected software as Zephyr’s Bluetooth mesh core stack and identify the root cause as an out-of-bounds write, with hig...

CVE-2022-1041

CVE-2022-1041 concerns an out-of-bounds write vulnerability in the Zephyr Bluetooth Mesh core stack during provisioning. The issue affects the Bluetooth mesh provisioning path in Zephyr and is classified with a HIGH impact on confidentiality, integrity, and availability (per CVSS vectors). Exploi...

PT-2022-13613 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: An out-of-bound write issue can be triggered in the Zephyr bluetooth mesh core stack during provisioning. Recommendations: At the moment, there is no information about a newer version that...

PT-2022-13612 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: An out-of-bound write issue can be triggered in the Zephyr bluetooth mesh core stack during provisioning. Recommendations: At the moment, there is no information about a newer version that...

CVE-2022-1042

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning...

About the security content of tvOS 15.6

About the security content of tvOS 15.6 This document describes the security content of tvOS 15.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

EulerOS Virtualization 2.10.0 : unzip (EulerOS-SA-2022-2040)

According to the versions of the unzip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap o...

EulerOS Virtualization 2.10.1 : unzip (EulerOS-SA-2022-2068)

According to the versions of the unzip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap o...

CVE-2022-1737 Pyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write

Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in a denial-of-service condition...

Oracle Linux 8 : grub2, / mokutil, / shim, / and / shim-unsigned-x64 (ELSA-2022-5095)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5095 advisory. - Add CVE-2020-15706, CVE-2020-15707 to the list Orabug: 31225072 - CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733 - CVE-2021-3697...

Out-of-bound write in function ml_append_int

Description Out-of-bound write in function mlappendint at memline.c:2895 Version commit 8eba2bd291b347e3008aa9e565652d51ad638cfa HEAD, tag: v8.2.5151 Proof of Concept guest@elk:/trung$ valgrind ./vim2/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S /home/guest/trung/poc/poc35min -c ':qa!' ==28900==...

EulerOS 2.0 SP5 : unzip (EulerOS-SA-2022-1917)

According to the versions of the unzip package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound...