AZL-31565 CVE-2023-45862 affecting package kernel for versions less than 5.15.135.1-2

An issue was discovered in drivers/usb/storage/eneub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation...

PT-2023-6740 · Citrix · Citrix Netscaler Adc +1

Name of the Vulnerable Software and Affected Versions: Citrix NetScaler ADC and NetScaler Gateway affected versions not specified Description: The issue is related to a Denial of Service condition in Citrix NetScaler ADC and NetScaler Gateway when configured as a Gateway or AAA Virtual Server. Th...

AZL-31268 CVE-2023-39194 affecting package kernel for versions less than 5.15.135.1-2

A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged CAPNETADMIN attacker to trigger an out-of-bounds read, potentially leadi...

The vulnerability of MediaTek’s WLAN driver microprogramming software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the WLAN driver software developed by MediaTek relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of WLAN micro-programming software from MediaTek allows attackers to enhance their privileges.

The vulnerability of the WLAN microprogramming software system from MediaTek relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the DDP microprogramming software-based wireless access point D-Link DAP-2622 allows a intruder to execute arbitrary code.

The vulnerability of the DDP microprogramming software-based wireless access point D-Link DAP-2622 lies in the reading of data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the SetSetupWizardStatus function in the microprogramming software of the D-Link DAP-1325 wireless signal booster allows a intruder to execute arbitrary code.

The vulnerability of the SetSetupWizardStatus function in the D-Link DAP-1325 wireless signal booster software is related to reading data outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the matchFlags function in the Netfilter subsystem of the Linux operating system allows a hacker to gain unauthorized access to protected information or cause a service failure.

The vulnerability of the matchFlags function in the Netfilter subsystem of the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failur...

The vulnerability of the getaddrinfo function in the system library glibc, which allows a hacker to cause a service failure

The vulnerability of the getaddrinfo function in the system library glibc is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the ril component in MediaTek’s microprogramming software allows attackers to enhance their privileges.

The vulnerability of MediaTek’s microprogramming software relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

The vulnerability of MediaTek’s microprogramming software relates to writing beyond the buffer in memory, allowing attackers to exploit their privileges.

The vulnerability of MediaTek’s microprogramming software relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2023-5584 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

The vulnerability of Parasolid’s 3D geometric modeling tool, along with the Teamcenter Visualization product lifecycle management system, relates to reading beyond the buffer in memory. This allows a malicious actor to execute arbitrary code.

The vulnerability of Parasolid’s 3D geometric modeling tool, as well as the Teamcenter Visualization product lifecycle management system, relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow attackers to execute arbitrary code using specially created XT files...

The vulnerability of Parasolid’s 3D geometric modeling tool, along with the Teamcenter Visualization product lifecycle management system, relates to reading data beyond the buffer in memory. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of Parasolid’s 3D geometric modeling tool, as well as the Teamcenter Visualization product lifecycle management system, relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow attackers to execute arbitrary code using specially created XT files...

Medium: libsepol

Issue Overview: The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper. CVE-2021-36084 The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from verifymappermclassperms and hashtabmap...

The vulnerability of the tiffcrop utility (tools/tiffcrop.c:3592) in the LibTIFF library, which allows a hacker to cause a service failure

The vulnerability of the tiffcrop utility tools/tiffcrop.c:3592 is related to the LibTIFF library. LibTIFF and its libraries involve reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the _TIFFmemcpy() function (libtiff/tif_unix.c) in the LibTIFF library, which allows a hacker to cause a service failure

Vulnerability of the TIFFmemcpy function libtiff/tifunix.c in the LibTIFF library. LibTIFF, the LibTIFF library, is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the software environment of the Tecnomatix Plant Simulation model lies in the reading beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the software environment for the simulation modeling of systems and processes in Tecnomatix Plant Simulation relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created SPP...

The vulnerability of the software environment of the Tecnomatix Plant Simulation model lies in the reading beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the software environment for the simulation modeling of systems and processes in Tecnomatix Plant Simulation relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created SPP file...

Vulnerability of the extractContigSamplesShifted8bits() function in the LibTIFF library, which allows a hacker to trigger a service failure.

The vulnerability of the extractContigSamplesShifted8bits function tools/tiffcrop.c in the LibTIFF library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...