Advisory ROSA-SA-2023-2159

Software: httpd 2.4.37 OS: ROSA Virtualization 2.1 packageevrstring: 2.4.37 CVE-ID: CVE-2006-20001 BDU-ID: 2023-01105 CVE-Crit: HIGH CVE-DESC: A vulnerability in the moddav module of the Apache HTTP Server web server is related to an operation exceeding buffer boundaries. Exploitation of the...

imageinfo library Data Compromise

The vulnerability of the imageinfo.hpp file in the imageinfo library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Emscripten HEIF AVIF DoS

The vulnerability of the Emscripten compiler in the library for encoding and decoding HEIF and AVIF files is related to the copying of buffers without checking the size of the input data during image processing using the strided function. Exploiting this vulnerability can allow an attacker to cau...

Qualcomm chip buffer error vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuitry mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. The Qualcomm chip suffers from a security vulnerability that stems from memory...

Cisco Catalyst 9100 Buffer Overflow DoS

The vulnerability of Cisco Catalyst 9100 access point software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker operating remotely to cause service interruptions...

Qualcomm Camera Driver security vulnerabilities

Qualcomm Camera Driver is a camera driver from Qualcomm Incorporated. A security vulnerability exists in the Qualcomm Camera Driver that originates from a camera memory corruption due to buffer copying without checking the input size and affects the following products and versions: AQT1000,...

Advisory ROSA-SA-2022-2056

Software: kernel 3.10.0 OS: rosa-server79 packageevrstring: kernel-3.10.0-1160.83.1.el7 CVE-ID: CVE-2022-2078 BDU-ID: 2022-04090 CVE-Crit: Not Relevant CVE-DESC: A vulnerability in the nftsetdescconcatparse function of the Linux operating systems kernel is related to buffer copying without checki...

Siemens PLC Buffer Overflow

The vulnerability of Siemens’ programmable logic controllers’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20221007-05

Firefox browser vulnerability is related to a bounds error in HTML content processing. Exploitation The vulnerability could allow a remote attacker to create a customized website, trick the victim into opening it, cause memory corruption, and execute arbitrary code on the target system. the victi...

Fig2dev put_font Buffer Overflow DoS

The vulnerability of the putfont function in the genpict2e.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service interruptions by converting xfig files into pict2e...

lwIP ICMP6 Buffer Overflow Confidential Data

The vulnerability of the icmp6sendresponsewithaddrsandnetif function in the TCP/IP protocol implementation of the lwIP stack is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to gain access to confidential data through a...

MuJS Buffer Overflow DoS

The vulnerability of the JavaScript MuJS interpreter is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Design/Logic Flaw

There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerability may affect availability...

Cisco Small Business LLDP Switches Buffer Overflow RCE

The vulnerability of Cisco Small Business LLDP switches lies in the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CUPS Buffer Overflow

The vulnerability of the CUPS printing system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

PT-2021-7392

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 87 Firefox ESR versions prior to 78.9 Thunderbird versions prior to 78.9 Description The issue is related to memory safety bugs and buffer copying without checking the size of input data, which could potentially allow...

Exiv2 crwimage_int.cpp DoS

The vulnerability in the crwimageint.cpp module of the Exiv2 library relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Apache HTTP Server mod_proxy_uwsgi Code Execution

The vulnerability of the modproxyuwsgi module in the Apache HTTP Server is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrar...

PT-2020-4604

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper buffer restrictions in BIOS firmware for some IntelR Processors, which may allow a privileged user to potentially enable escalation of privilege via...

PAN-OS Buffer Overflow Privilege Escalation

The vulnerability of the PAN-OS operating system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...