UBUNTU-CVE-2022-37394

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compu...

OpenStack 安全漏洞

OpenStack is a cloud platform management program of the National Aeronautics and Space Administration NASA of the U.S. OpenStack Nova is one of the cloud computing construct controllers written in Python and is part of the IaaS system. A security vulnerability exists in OpenStack Nova versions...

Denial Of Service (DoS)

webkit2gtk is vulnerable to denial of service. The vulnerability exists due to an out-of-bound issue which allows a remote attacker to send maliciously crafted web content that may lead to arbitrary code execution...

EulerOS Virtualization 2.9.1 : unzip (EulerOS-SA-2022-2191)

According to the versions of the unzip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap o...

CVE-2022-1042

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning...

CVE-2022-1041

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning...

Stack overflow

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning...

CVE-2022-1042 Out-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioning

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning...

CVE-2022-1042

CVE-2022-1042 : The Zephyr Bluetooth Mesh core stack contains an out-of-bounds write vulnerability that can be triggered during provisioning. The connected documents confirm the affected software as Zephyr’s Bluetooth mesh core stack and identify the root cause as an out-of-bounds write, with hig...

CVE-2022-1041

CVE-2022-1041 concerns an out-of-bounds write vulnerability in the Zephyr Bluetooth Mesh core stack during provisioning. The issue affects the Bluetooth mesh provisioning path in Zephyr and is classified with a HIGH impact on confidentiality, integrity, and availability (per CVSS vectors). Exploi...

PT-2022-13613 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: An out-of-bound write issue can be triggered in the Zephyr bluetooth mesh core stack during provisioning. Recommendations: At the moment, there is no information about a newer version that...

PT-2022-13612 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: An out-of-bound write issue can be triggered in the Zephyr bluetooth mesh core stack during provisioning. Recommendations: At the moment, there is no information about a newer version that...

CVE-2022-1042

In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning...

About the security content of tvOS 15.6

About the security content of tvOS 15.6 This document describes the security content of tvOS 15.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CLSA-2022-1658172267 Fix CVE(s): CVE-2022-2206, CVE-2022-2257, CVE-2022-2286, CVE-2022-2285, CVE-2022-2284, CVE-2022-2287, CVE-2022-2264

SECURITY UPDATE: Out-of-bound read in function msgouttransattr - debian/patches/CVE-2022-2206.patch: Adjust cmdlinerow and msgrow to the value of Rows. - CVE-2022-2206 SECURITY UPDATE: Heap-based buffer overflow in function utfcptr2len - debian/patches/CVE-2022-2284.patch: Stop Visual mode when...

EulerOS Virtualization 2.10.0 : unzip (EulerOS-SA-2022-2040)

According to the versions of the unzip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap o...

Out-Of-Bound Writes

SDLttf is vulnerable to out-of-bound writes. The vulnerability exists in TTFRenderTextSolid function which allows an attacker to cause out-of-bound writes via a crafted TTF file...

EulerOS Virtualization 2.10.1 : unzip (EulerOS-SA-2022-2068)

According to the versions of the unzip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap o...

CVE-2022-1737 Pyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write

Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in a denial-of-service condition...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current wavpack Multiple Vulnerabilities (SSA:2022-191-01)

The version of wavpack installed on the remote host is prior to 5.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-191-01 advisory. - An out of bounds read was found in Wavpack 5.4.0 in processing .WAV files. This issue triggered in function...