11941 matches found
RHEL 9 : libX11 (RHSA-2024:2145)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2145 advisory. The libX11 packages contain the core X11 protocol client library. Security Fixes: libX11: out-of-bounds memory access in XkbReadKeySyms...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from a lack of boundary checking...
IBM MQ Appliance 安全漏洞
The IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware. The IBM MQ Appliance suffers from a buffer overflow vulnerability that originates from not properly checking boundaries, which can be exploited by an attacker to overflow a buffer and...
The vulnerability of the WebAssembly component in Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of the WebAssembly component in Microsoft Edge and Google Chrome relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
NETGEAR RAX35 安全漏洞
The NETGEAR Rax35 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR RAX35. The vulnerability stems from an application boundary error when handling untrusted input. An attacker could exploit the vulnerability to bypass the product's authentication...
The vulnerability of the planar_skip_plane_rle() function in the RDP client FreeRDP, which allows a hacker to disclose sensitive information
The vulnerability of the planarskipplanerle function in the FreeRDP client is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this function...
python-aiohttp: http request smuggling
An HTTP request smuggling vulnerability was found in aiohttp. Security-sensitive parts of the Python HTTP parser retained minor differences in allowable character sets that must trigger error handling to robustly match frame boundaries of proxies in order to protect against the injection of...
Advisory ROSA-SA-2024-2401
Software: swtpm 0.7.0 OS: ROSA Virtualization 2.1 packageevrstring: swtpm-0.7.0-4.20211109gitb79fd91.module+el8.7.0+16689+53d59bc2.src.rpm CVE-ID: CVE-2022-23645 BDU-ID: 2022-06088 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the swtpm emulator TPM is related to reading beyond buffer boundaries...
GNU C Library 安全漏洞
GNU C Library is an open source, free C compiler released under the LGPL license. GNU C Library suffers from a buffer overflow vulnerability that originates from a boundary error in the iconv function when handling untrusted input. An attacker could exploit the vulnerability to cause the...
RHEL 9 : kernel-rt (RHSA-2024:1840)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1840 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file
An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service...
shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file
An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service...
The vulnerability of the UEFI loader’s shim, related to reading beyond the field, allows a hacker to trigger a system failure.
The vulnerability of the UEFI loader “shim” is related to errors in reading beyond the boundary, due to the lack of proper boundary checking during the loading of the binary PE file. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the UEFI loader’s shim, related to reading beyond the field, allows a hacker to trigger a system failure or disclose protected information.
The vulnerability of the UEFI loader “shim” is related to reading beyond the field boundary. Exploiting this vulnerability can allow an attacker to cause a system failure or disclose protected information...
ROS-20240412-07
A vulnerability in the tiffreadrgbatileext function of the LibTIFF library is related to writing beyond buffer boundaries in the memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service. denial of service...
SUSE CVE-2024-26702
In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: rm3100: add boundary check for the value read from RM3100REGTMRC Recently, we encounter kernel crash in function rm3100commonprobe caused by out of bound access of array rm3100samprates because of underlying...
PT-2024-3023 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a memory boundary read and can allow an attacker to disclose protected information. There is no information provided about the estimated number of potentially affect...
UNISOC Chipsets 安全漏洞
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of boundary checking in the ril service, which may result in out-of-bounds writes...
UNISOC Chipsets 安全漏洞
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of boundary checking in the ril service, which may result in out-of-bounds writes...
UNISOC Chipsets 安全漏洞
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of boundary checking in the ril service, which may result in out-of-bounds writes...