UBUNTU-CVE-2022-31212

An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is supplied...

SUSE-SU-2022:2405-1 Security update for p11-kit

This update for p11-kit fixes the following issues: - CVE-2020-29362: Fixed a 4 byte overread in p11rpcbuffergetbytearray which could lead to crashes bsc1180065...

The vulnerability of the software for working with animations in Adobe Character Animator, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the software for working with animations in Adobe Character Animator is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Mbed TLS 缓冲区错误漏洞

Mbed TLS is an open source, portable, easy-to-use, readable and flexible SSL library. A buffer error vulnerability exists in Mbed TLS versions prior to 2.28.2 and 3.x versions prior to 3.2.0, which stems from the fact that in certain configurations, an unauthenticated attacker can send an invalid...

The vulnerability of microprogrammed software in industrial switches such as SCALANCE X302-7, SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X310, SCALANCE X320-1, SCALANCE X408-2, SCALANCE XR324-4M, and SCALANCE XR324-12M lies in the ability to read data beyond the buffer in memory, allowing an intruder to cause a service failure.

The vulnerability of the microprogrammed software in industrial switches SCALANCE X302-7, SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X310, SCALANCE X320-1, SCALANCE X408-2, SCALANCE XR324-4M, and SCALANCE XR324-12M,...

CVE-2022-34282

A vulnerability has been identified in PADS Standard/Plus Viewer All versions. The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing PCB files. An attacker could leverage this vulnerability to leak information in the context of the curren...

OESA-2022-1740 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

CVE-2022-2301

Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3...

UBUNTU-CVE-2022-2301

Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3...

chafa 缓冲区错误漏洞

chafa is a command line utility program for individual developers. A security vulnerability exists in versions prior to chafa 1.10.3, which stems from a buffer over-read...

The vulnerability of the suggest_trie_walk() function in the Vim text editor allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the suggesttriewalk function in the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the ins_bytes() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the insbytes function in the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

OESA-2022-1731 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

vim: buffer over-read in function find_next_quote

A flaw was found in vim, where it is vulnerable to a buffer over-read in the findnextquote function. This flaw allows a specially crafted file to crash software, modify memory and possibly perform remote execution when opened in vim...

Buffer Over-read in vim/vim

...

The vulnerability of the compile_xclass_matchingpath() function in the PCRE2 library allows a attacker to cause a service failure or expose protected information.

The vulnerability of the compilexclassmatchingpath function in the PCRE2 library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service failures or disclose sensitive information by sending specially crafted data...

The vulnerability of the Console component of the Oracle WebLogic Server application server allows a attacker to gain read access to data or modify data.

The vulnerability of the Console component of the Oracle WebLogic Server application lies in reading data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to gain access to read data or modify data through specially crafted HTTP requests...

PT-2022-20611 · Unknown +3 · C-Uitl/C-Shquote +4

Name of the Vulnerable Software and Affected Versions: dbus-broker versions prior to 31 Description: An issue was discovered in dbus-broker where it depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is...

CVE-2022-32141

Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condition. User interaction is not required...

CODESYS 缓冲区错误漏洞

CODESYS is a controller development system from Germany's 3S-Smart Software Solutions. A buffer error vulnerability exists in several CODESYS products and stems from a lack of internal buffer read limits in the application. An attacker can exploit this vulnerability to craft a request with an...