Advisory ROSA-SA-2023-2250

software: mariadb 10.5.20 OS: ROSA-CHROME packageevrstring: mariadb-10.5.20-1.src.rpm CVE-ID: CVE-2018-25032 BDU-ID: 2022-01641 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the zlib library is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could...

The vulnerability of the XpmCreateXpmImageFromBuffer() function in the libXpm library for working with X Pixmap (XPM) images allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the XpmCreateXpmImageFromBuffer function in the X Pixmap XPM library, which is used for working with XPM image files, involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

The vulnerability of the u32_match_it function in the Netfilter subsystem of the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the u32matchit function in the Netfilter subsystem of the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the WinRAR file archiver, related to reading beyond the buffer limit in memory, allows attackers to disclose protected information or cause system failures.

The vulnerability of the WinRAR file compressor is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information or cause system failures...

ROS-20230919-02

Vulnerability of FilePickerShownCallback function in Mozilla Firefox, Firefox ESR and Thunderbird e-mail client Thunderbird is related to memory usage after it is freed. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality, integrity, and availability of...

The vulnerability of the `avr_elf32_load_records_from_section()` function in the GNU Binutils development environment, related to writing beyond the buffer boundaries in memory, allows a malicious actor to trigger a system failure.

The vulnerability of the avrelf32loadrecordsfromsection function in the GNU Binutils development environment is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the process_symbol_table function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the processsymboltable function in the GNU Binutils development environment is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `parse_module` function in the GNU Binutils development environment, which involves reading beyond the buffer boundaries in memory, allows an attacker to trigger a service failure or cause other adverse effects.

The vulnerability of the parsemodule function in the GNU Binutils development environment is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure or exert other adverse effects...

The vulnerability of the tiffcrop utility in the libtiff library, which allows a hacker to cause a service failure.

The vulnerability of the tiffcrop utility in the libtiff library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tiffcrop utility (tools/tiffcrop.c:3609) in the libtiff library, which allows a hacker to cause a service failure.

The vulnerability of the tiffcrop utility tools/tiffcrop.c:3609 in the libtiff library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tiffcrop utility in the libtiff library, which allows a hacker to cause a service failure.

The vulnerability of the tiffcrop utility in the libtiff library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20230904-01

The vulnerability of the qfqchangeclass function of the Linux kernel is related to the operation exceeding the buffer boundaries in memory while processing the QFQMINLMAX value. buffer boundaries in memory when processing the QFQMINLMAX value. Exploitation of the vulnerability could allow an...

Advisory ROSA-SA-2023-2212

Software: freetype 2.9.1 OS: ROSA Virtualization 2.1 packageevrstring: freetype-2.9.1-9.rv3.src.rpm CVE-ID: CVE-2022-27404 BDU-ID: 2022-06908 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the sfntinitface function of the FreeType library is related to writing beyond buffer boundaries...

The vulnerability of the FvDesigner software for creating operator panels, related to the execution of operations outside the buffer boundaries in memory, allows a hacker to execute arbitrary code on the target system.

The vulnerability of the FvDesigner software for creating operator panels is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system...

Microsoft Edge’s vulnerability, related to the execution of operations beyond the buffer in memory, allows attackers to

The vulnerability of Microsoft Edge relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability in the file src/InitExt.c of the client API library for the X Window System libX11 allows a hacker to cause a service failure.

The vulnerability in the src/InitExt.c file of the X Window System libX11 library lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Horner Automation Cscape software, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Horner Automation Cscape software lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by allowing the user to open a specially created FNT file...

ROS-20230620-02

Vulnerability of FreeImages library for working with graphic formats is related to reading data outside the buffer boundaries in memory. buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely, to cause a denial of service via a crafted JXR file...

TP-Link Archer AX10(EU)_V1.2_230220 Buffer Overflow Vulnerability

Exploit Title: Buffer Overflow in TP-Link Archer AX10EUV1.2230220 Exploit Author: Giuseppe Compare CVE: CVE-2023-34832 Vendor Homepage: https://www.tp-link.com/ Version: TP-Link Archer AX10EUV1.2230220 Buffer Overflow There is a buffer overflow in the FUN131e8 function due to using sprintf...

The vulnerability of the flow processing daemon (flowd) in Juniper Networks’ Junos OS, which allows a attacker to trigger a service failure

The vulnerability of flow processing demons in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...