UBUNTU-CVE-2023-1255

Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it to read past the input buffer, leading to a crash. Impact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM platform can crash in rare circumstances. The...

Security Bulletin: Vulnerabilities in libxml2 affect IBM Integrated Management Module (IMM) for System x & BladeCenter

Summary IBM Integrated Management Module IMM for System x & BladeCenter has addressed the following vulnerabilities in libxml2. Vulnerability Details Summary IBM Integrated Management Module IMM for System x & BladeCenter has addressed the following vulnerabilities in libxml2. Vulnerability...

PT-2023-21075 · Sonos · Sonos One Speaker

Name of the Vulnerable Software and Affected Versions: Sonos One Speaker version 70.3-35220 Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within...

CVE-2022-33297

Information disclosure due to buffer overread in Linux sensors...

Information disclosure

Information disclosure due to buffer overread in Linux sensors...

CVE-2022-24350

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI function 0x17 verifies that the output buffer lies within the command buffer but does not verify that output data does not go beyond the end of the command buffer. In particular, the GetFlashTable function ...

The vulnerability of TP-Link Archer AX21 (AX1800)’s microprogramming software allows a remote attacker to execute arbitrary code.

The vulnerability of TP-Link Archer AX21 AX1800 microprogramming software lies in reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

AZL-26155 CVE-2021-45985 affecting package memcached for versions less than 1.6.13-3

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

AZL-26158 CVE-2021-45985 affecting package ntopng for versions less than 5.2.1-2

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

UBUNTU-CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

Lua 缓冲区错误漏洞

Lua is a lightweight, extensible open source scripting language from the LUA team. A security vulnerability exists in Lua version 5.4.3, which stems from a faulty terminator during a tail call that can lead to an over-read of a heap-based buffer...

PT-2023-12563 · Lua +1 · Lua +1

Name of the Vulnerable Software and Affected Versions: Lua version 5.4.3 Description: The issue is related to an erroneous finalizer called during a tail call, leading to a heap-based buffer over-read in Lua 5.4.3. Recommendations: For Lua version 5.4.3, at the moment, there is no information abo...

CVE-2022-33297

CVE-2022-33297 describes an information disclosure caused by a buffer overread in Linux sensors. The root cause is a buffer overread within the Linux sensors component, allowing leakage of sensitive data. Exploitation is local with low complexity and no user interaction required; the attack targe...

CVE-2022-33297 Buffer overread in Linux Sensors

Information disclosure due to buffer overread in Linux sensors...

CVE-2022-33297 Buffer overread in Linux Sensors

Information disclosure due to buffer overread in Linux sensors...

PT-2023-13244 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read that occurs while parsing DNS response packets. Recommendations: At the moment, there is no information about a newer...

PT-2023-13299 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read while parsing the wms message. This occurs when the buffer and its length are provided, leading to potential data...

PT-2023-13292 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the Modem due to a buffer over-read. This occurs when getting the length of Unfragmented headers in an IPv6 packet. Recommendations: At the...

PT-2023-13296 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the Modem due to a buffer over-read. This occurs when the Modem receives an IP header with a malformed length. Recommendations: At the moment...

PT-2023-13249 · Qualcomm · Snapdragon +12

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to information disclosure due to a buffer over-read in a modem. This occurs when the modem processes an IPv6 packet that contains either a hop-by-hop or destination...