Milesight UR32L eventcore access violation vulnerability

Talos Vulnerability Report TALOS-2023-1696 Milesight UR32L eventcore access violation vulnerability July 6, 2023 CVE Number CVE-2023-23571 SUMMARY An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to...

CVE-2023-28542 Buffer Over-read in WLAN HOST

Memory Corruption in WLAN HOST while fetching TX status information...

CVE-2023-28542 Buffer Over-read in WLAN HOST

Memory Corruption in WLAN HOST while fetching TX status information...

CVE-2023-28541 Buffer Over-read in WLAN Host

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...

CVE-2023-28541 Buffer Over-read in WLAN Host

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data...

SUSE-SU-2023:2620-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2023-1255: Fixed input buffer over-read in AES-XTS implementation on 64 bit ARM bsc1210714. - CVE-2023-2650: Fixed possible DoS translating ASN.1 object identifiers bsc1211430...

RHEL 9 : openssl (RHSA-2023:3722)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3722 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

`openssl` `X509VerifyParamRef::set_host` buffer over-read

When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte...

GHSA-XCF7-RVMH-G6Q4 `openssl` `X509VerifyParamRef::set_host` buffer over-read

When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte...

`openssl` `X509VerifyParamRef::set_host` buffer over-read

When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte...

RUSTSEC-2023-0044 `openssl` `X509VerifyParamRef::set_host` buffer over-read

When this function was passed an empty string, openssl would attempt to call strlen on it, reading arbitrary memory until it reached a NUL byte...

CVE-2023-35862

libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...

Design/Logic Flaw

libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...

CVE-2023-35862

libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...

CVE-2023-35862

libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...

libcoap 缓冲区错误漏洞

libcoap is obgm open source a lightweight application protocol C implementation. A security vulnerability exists in libcoap version 4.3.1. An attacker exploited this vulnerability to over-read a buffer via the coapparseoscoreconfmem function in coaposcore.c...

CVE-2023-35862

CVE-2023-35862 concerns libcoap 4.3.1, with a buffer over-read in coap_parse_oscore_conf_mem (coap_oscore.c). The impact described in the sources is availability impact (NVD CVSS 3.1: base score 6.5) and no confidentiality/integrity impact stated. No explicit remediation or patch version is provi...

CVE-2023-35862

libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...

CVE-2023-35862

libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...

CVE-2023-35862

libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c...