12080 matches found
CVE-2023-35862
libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...
CVE-2023-35862
libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...
CVE-2023-35862
CVE-2023-35862 concerns libcoap 4.3.1, with a buffer over-read in coap_parse_oscore_conf_mem (coap_oscore.c). The impact described in the sources is availability impact (NVD CVSS 3.1: base score 6.5) and no confidentiality/integrity impact stated. No explicit remediation or patch version is provi...
libcoap 缓冲区错误漏洞
libcoap is obgm open source a lightweight application protocol C implementation. A security vulnerability exists in libcoap version 4.3.1. An attacker exploited this vulnerability to over-read a buffer via the coapparseoscoreconfmem function in coaposcore.c...
CVE-2023-35862
libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...
CVE-2023-35862
libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...
CVE-2023-35862
libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...
EulerOS Virtualization 3.0.6.0 : vim (EulerOS-SA-2023-2251)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing...
EulerOS 2.0 SP5 : tcpdump (EulerOS-SA-2023-2175)
According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint for VRRP version 3, a different vulnerability than...
Huawei EulerOS: Security Advisory for tcpdump (EulerOS-SA-2023-2175)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2023:2470-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - Update to version 3.0.8 bsc1207541. - CVE-2022-40735: Fixed remote trigger of expensive server-side DHE modular-exponentiation with long exponents in Diffie-Hellman Key Agreement Protocol bsc1205476. - CVE-2023-1255: Fixed input buffer...
Amazon Linux 2 : glusterfs (ALAS-2023-2071)
The version of glusterfs installed on the remote host is prior to 3.12.2-18. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2071 advisory. In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read. CVE-2023-26253...
EulerOS Virtualization 2.11.1 : binutils (EulerOS-SA-2023-2054)
According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Assertion fail in the displaydebugnames function in binutils/dwarf.c may lead to program crash and denial of service.CVE-2022-3812...
Important: glusterfs
Issue Overview: In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read. CVE-2023-26253 Affected Packages: glusterfs Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between A...
CVE-2023-21669 Buffer Over-read in WLAN HOST
Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address...
CVE-2023-21661 Buffer Over-read in WLAN Firmware
Transient DOS while parsing WLAN beacon or probe-response frame...
CVE-2023-21661 Buffer Over-read in WLAN Firmware
Transient DOS while parsing WLAN beacon or probe-response frame...
CVE-2023-21660 Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing FT Information Elements...