PT-2022-7359 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel io uring module affected versions not specified Description: The issue is related to an off-by-one error in the io uring module, specifically affecting the io sync cancel function in the io uring/cancel.c component. This error is...

Tenda AC15 Buffer Overflow Vulnerability (CNVD-2022-75823)

Tenda AC15 is a wireless router from Tenda, China. Tenda AC15 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the WifiBasicSet function. A remote attacker could exploit this vulnerability to overflow the buffer and execute arbitrary code on the system...

Google Android Information Disclosure Vulnerability (CNVD-2022-62204)

Google Android is a Linux-based open-source operating system from the U.S. company Google Google. The vulnerability stems from an incorrect boundary check that could result in an out-of-bounds read. An attacker could exploit the vulnerability to cause a local information disclosure that requires...

The vulnerability of the Azure Storage Library, related to deficiencies in system-defined boundaries, allows attackers to gain unauthorized access to protected information.

The vulnerability of Azure Storage Library is related to deficiencies in the system’s controlled zone segmentation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the kbase_jd_user_buf_pin_pages function (mali_kbase_mem.c) in the graphics processor driver for Android devices from Google Pixel allows a hacker to escalate their privileges.

The vulnerability of the kbasejduserbufpinpages function malikbasemem.c in the graphics processor driver for Android devices from Google Pixel devices is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Adobe Acrobat Reader DC 缓冲区错误漏洞

Adobe Acrobat Reader DC is the United States of America Audobee Adobe company of a Pdf reading tool. It is used to reliably view, print and annotate Pdf documents. A buffer error vulnerability exists in Adobe Acrobat Reader DC, which arises from performing operations in memory without properly...

Debian DSA-5209-1 : net-snmp - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5209 advisory. Yu Zhang and Nanyu Zhong discovered several vulnerabilities in net-snmp, a suite of Simple Network Management Protocol applications, which could result in denial ...

Tenda W6 Stack Overflow Vulnerability (CNVD-2022-75819)

Tenda W6 is a wireless WiFi AP access point router from Tenda, China. Tenda W6 is vulnerable to a stack overflow vulnerability caused by improper boundary checking in the function setAutoPing. A remote attacker could exploit this vulnerability to overflow the buffer and execute arbitrary code on...

Denial Of Service (DoS)

gimp is vulnerable to denial of service. Vulnerability exists in gimplayerinvalidateboundary which allows an attacker to trigger an unhandled exception via a crafted XCF file...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Google Android Bluetooth component, which stems from an incorrect boundary check and may result in out-of-bounds writes...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android version 13, which stems from a lack of boundary checking in Bluetooth, which could lead to out-of-bounds writes, and which could be exploited by an...

CVE-2022-35243

In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.5.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, using an undisclosed iControl REST endpoint. ...

Directory traversal

In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can allow the attacker...

CVE-2022-31473 BIG-IP APM Appliance mode vulnerability CVE-2022-31473

In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can allow the attacker...

CVE-2022-31473

CVE-2022-31473 affects BIG-IP APM in Appliance mode. In 16.1.x before 16.1.1 and 15.1.x before 15.1.4, an authenticated attacker could bypass Appliance mode restrictions via a directory traversal vulnerability in an undisclosed iApps page, crossing a security boundary. The F5 advisory K34893234 s...

PT-2022-20751 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions 15.1.x through 15.1.3 BIG-IP versions 16.1.x through 16.1.0 Description: An authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApp...

CVE-2022-35243: Improper Privilege Management

In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.5.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, using an undisclosed iControl REST endpoint. ...

The vulnerability of the Mozilla Firefox browser arises from an operation that goes beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Mozilla Firefox browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

The vulnerability in the implementation of the remap_pfn_range() function in Android kernel allows a hacker to trigger a service failure.

The vulnerability of the remappfnrange function in Android operating system kernels stems from the issue where the operation goes beyond the buffer boundaries in memory when processing the parameter vma-vmpageprot. Exploiting this vulnerability can allow a remote attacker to cause a service failu...

Vim utf_ptr2char function buffer overflow vulnerability

Vim is a cross-platform text editor. Vim is vulnerable to a buffer overflow vulnerability that stems from a boundary error in the utfptr2char function when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system...