PT-2024-10492 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.15.4-gentoo-parisc64 4 Description: The vulnerability is caused by overrunning the sglist and incorrectly testing sg dma lensglist before nents. Normally, this doesn't cause a crash, but in this case, sglist...

Mageia: Security Advisory (MGASA-2020-0309)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0006)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM / 18.04 LTS : shadow vulnerabilities (USN-5254-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5254-1 advisory. It was discovered that shadow incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or expose...

Expat 输入验证错误漏洞

Expat is a fast streaming XML parser written in C. An integer overflow vulnerability exists in versions of Expat prior to 2.4.4, which stems from a boundary error when processing untrusted input and can be exploited by remote attackers to execute arbitrary code on the system...

Apple多款产品缓冲区错误漏洞

Apple iPadOS and others are products of Apple, Inc.Apple iPadOS is an operating system for iPad tablets.Apple macOS Big Sur is a mobile application app.Apple macOS Monterey is the 18th major version of macOS, the desktop operating system used for the Macintosh... version. A buffer error...

Apple多款产品缓冲区错误漏洞

Apple tvOS and others are products of Apple Inc. in the U.S. Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.Apple macOS Big Sur is a mobile app app. A buffer error vulnerability exists in several Apple products that stems from a boundary...

Apple多款产品缓冲区错误漏洞

Apple tvOS and others are products of Apple Inc. tvOS is an operating system for smart TVs. apple iPadOS is an operating system for iPad tablets. apple macOS Monterey is the 18th major version of macOS, the operating system for the Macintosh desktop. A buffer error vulnerability exists in several...

Design/Logic Flaw

A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

Adobe Acrobat Reader Dc Buffer Overflow Vulnerability (CNVD-2022-11156)

Adobe Acrobat Reader Dc is a Pdf reading tool from Adobe. Adobe Acrobat Reader Dc suffers from a buffer error vulnerability that originates from a boundary error when handling untrusted input. An attacker could exploit this vulnerability to create a specially crafted PDF file, trick the victim in...

Jerryscript stack buffer overflow vulnerability

JerryScript is a lightweight JavaScript engine from the JerryScript project. jerryscript has a stack buffer overflow vulnerability in version 3.0.0, which stems from vmloop.ltopriv.304 in /jerry-core/vm/vm.c when handling untrusted input with a boundary error. An attacker could exploit this...

Moddable SDK Stack Buffer Overflow Vulnerability

Moddable SDK is a set of software development kits SDKs for IoT embedded software development from the US company Moddable. The Moddable SDK has a stack buffer overflow vulnerability in v11.5.0 that stems from a boundary error in the component interceptorstrcat when handling untrusted input. A...

Lexmark buffer overflow vulnerability

Lexmark is a series of printers in the U.S. Lexmark is vulnerable to a buffer overflow vulnerability that exists due to a boundary error when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system...

Moddable SDK Heap Buffer Overflow Vulnerability (CNVD-2022-08216)

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, U.S. Moddable SDK in v11.5.0 is vulnerable to a heap buffer overflow vulnerability stemming from a boundary error in component libcstartmain when handling untrusted input. A remote attacker could...

epub2txt 缓冲区错误漏洞

epub2txt is an open source, simple command line utility for extracting text from an EPUB document and optionally rearranging it to fit the text display in a specific number of columns. A security vulnerability exists in epub2txt that originates when a networked system or product performs an...

Moddable SDK Heap Buffer Overflow Vulnerability (CNVD-2022-08203)

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable USA. v11.5.0 of the Moddable SDK is vulnerable to a heap buffer overflow vulnerability that stems from a boundary error in the asanmemcpy component when handling untrusted input. A remote attacker...

Espruino Buffer Overflow Vulnerability (CNVD-2022-08365)

Espruino is a JavaScript interpreter. It is designed for devices with only 128kB flash and 8kB RAM.Espruino is vulnerable to a buffer overflow vulnerability in version 2.10.246, which stems from a boundary error in vcbprintf via src jsutils.c when handling untrusted input. A remote attacker could...

GHSA-883X-6FCH-6WJX Trust Boundary Violation due to Incomplete Blacklist in Test Failure Processing in Ares

Impact This allows an attacker to create special subclasses of InvocationTargetException that escape the exception sanitization because JUnit extracts the cause in a trusted context before the exception reaches Ares. This means that arbitrary student code can be executed in a trusted context, and...

Trust Boundary Violation due to Incomplete Blacklist in Test Failure Processing in Ares

Impact This allows an attacker to create special subclasses of InvocationTargetException that escape the exception sanitization because JUnit extracts the cause in a trusted context before the exception reaches Ares. This means that arbitrary student code can be executed in a trusted context, and...

Lexmark 安全漏洞

Lexmark is a series of printers in the U.S. Lexmark is vulnerable to a buffer overflow vulnerability that exists due to a boundary error when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system...