12083 matches found
CVE-2022-33273 Buffer over-read in Trusted Execution Environment
Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation...
CVE-2022-33273
CVE-2022-33273 : Information disclosure due to a buffer over-read in the Trusted Execution Environment during QRKS report generation. Affected component: Qualcomm Trusted Execution Environment ; root cause: buffer over-read in the QRKS report path. Impact: confidentiality leakage (high); attack v...
Information disclosure
Information disclosure due to buffer over-read in Modem while parsing DNS hostname...
CVE-2022-40505 Buffer over-read in Modem
Information disclosure due to buffer over-read in Modem while parsing DNS hostname...
CVE-2022-40505 Buffer over-read in Modem
Information disclosure due to buffer over-read in Modem while parsing DNS hostname...
CVE-2022-40505
CVE-2022-40505 is described across connected sources as a buffer‑over‑read in the Modem when parsing DNS hostnames, causing information disclosure in Qualcomm chipset Modems. The affected component is the Modem/DNS hostname parsing path; the root cause is a buffer over-read. Documented impact inc...
Denial Of Services (DoS)
lua5.4 is vulnerable to Denial Of Services DoS. The vulnerability exists because the erroneous finalizer call during a tail call leads to a heap-based buffer over-read, allowing an attacker to cause an application crash...
EulerOS Virtualization 2.9.0 : binutils (EulerOS-SA-2023-1654)
According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches...
EulerOS Virtualization 2.9.1 : sudo (EulerOS-SA-2023-1649)
According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that...
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2023-1649)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2023-1683)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.9.0 : sudo (EulerOS-SA-2023-1683)
According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that...
Amazon Linux AMI : jasper (ALAS-2023-1733)
The version of jasper installed on the remote host is prior to 1.900.1-21.12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1733 advisory. A flaw was found in the Jasper tool's jpc encoder. This flaw allows an attacker to craft input provided to Jasper,...
CVE-2023-1255 Input buffer over-read in AES-XTS implementation on 64 bit ARM
Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it to read past the input buffer, leading to a crash. Impact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM platform can crash in rare circumstances. The...
CVE-2023-1255 Input buffer over-read in AES-XTS implementation on 64 bit ARM
Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it to read past the input buffer, leading to a crash. Impact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM platform can crash in rare circumstances. The...
Amazon Linux 2 : jasper (ALAS-2023-2018)
The version of jasper installed on the remote host is prior to 1.900.1-33. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2018 advisory. A flaw was found in the Jasper tool's jpc encoder. This flaw allows an attacker to craft input provided to Jasper, causi...
Important: jasper
Issue Overview: A flaw was found in the Jasper tool's jpc encoder. This flaw allows an attacker to craft input provided to Jasper, causing an arbitrary out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. CVE-2020-27828 ...
Mitre: CVE-2021-45985 Erroneous finalizer call in Lua leads to a heap-based buffer over-read
This CVE was assigned by Mitre. Some Microsoft products consume Lau open-source software. The purpose of this document is to attest to the fact that the products listed in the Security Updates table have been updated to protect against this vulnerability...
