Ubuntu: Security Advisory (USN-3685-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the software for creating FvDesigner operator panels is related to the execution of an operation beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the FvDesigner software for creating operator panels is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using a specially created malicious file...

The vulnerability of Adobe Illustrator’s graphic editor arises from the possibility of an operation beyond the buffer boundaries in memory, allowing a malicious actor to gain unauthorized access to protected information.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using a specially created malicious file...

The vulnerability of the babel_packet_examin() function (babeld/message.c) in the software implementation of network routing on Unix-like systems allows a hacker to execute arbitrary code.

The vulnerability of the babelpacketexamin function in the FRRouting software implementation for Unix-like systems is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerabilities of the functions parse_hello_subtlv(), parse_ihu_subtlv(), and parse_update_subtl() in the software for implementing network routing on Unix-like systems allow a hacker to execute arbitrary code.

The vulnerability of the functions parsehellosubtlv, parseihusubtlv, and parseupdatesubtl babeld/message.c of the software tool for implementing networking routing on Unix-like systems is related to the escape of operations outside of the buffer in memory. Exploiting this vulnerability could allo...

The vulnerability of the babel_packet_examin() function (babeld/message.c) in the software implementation of network routing on Unix-like systems allows a hacker to execute arbitrary code.

The vulnerability of the babelpacketexamin function in the FRRouting software implementation for Unix-like systems is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Adobe Framemaker desktop publishing system arises from the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

The vulnerability of TP-Link TL-R473G router’s microprogramming software lies in the fact that the operation is performed outside the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of TP-Link TL-R473G router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted packets...

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader lies in the fact that the write-off operation beyond the buffer is possible in memory, allowing an attacker to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader are related to the execution of write operations beyond the buffer in memory. Exploiting these vulnerabilities can allow...

The vulnerability of the Adobe Framemaker desktop publishing system arises from the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

VulnCheck KEV: CVE-2021-20166

Netgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the applicaiton...

The vulnerability of Intel Wireless Bluetooth and Killer Bluetooth drivers, related to the occurrence of operations outside the buffer in memory, allows a intruder to gain unauthorized access to protected information or cause service failures.

The vulnerability of Intel Wireless Bluetooth and Killer Bluetooth drivers is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or cause service failures...

The vulnerability of Intel Wireless Bluetooth and Killer Bluetooth drivers, related to the occurrence of operations outside the buffer in memory, allows attackers to increase their privileges.

The vulnerability of Intel Wireless Bluetooth and Killer Bluetooth drivers is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of UEFI (BIOS) software on desktop computers and personal computers manufactured by Hewlett-Packard Development Company L.P. stems from an operation that goes beyond the buffer boundaries in memory, allowing attackers to exploit their privileges.

The vulnerability of UEFI BIOS in desktop computers and personal computers manufactured by Hewlett-Packard Development Company L.P. is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the SMM driver in microprogramming systems based on UEFI (BIOS) in desktop computers and personal computers manufactured by Hewlett-Packard Development Company L.P. allows a hacker to gain increased privileges.

The vulnerability of the System Management Mode SMM driver in microprogramming-based EFI BIOS desktop computers and personal computers manufactured by Hewlett-Packard Development Company L.P. is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerabilit...

The vulnerability of the programming software for PLCs (programmable logic controllers), namely EcoStruxure Control Expert, arises from the execution of operations beyond the buffer boundaries in memory. This vulnerability allows a malicious actor to cause system failures.

The vulnerability of the EcoStruxure Control Expert programming tool for programmable logic controllers involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability in the web interface for managing microprogrammed wireless router software from Cisco’s Small Business series—RV110W, RV130, RV130W, and RV215W—allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability in the web interface for managing microprogramming software on Cisco Small Business RV110W, RV130, RV130W, and RV215W routers stems from the copying of buffers without checking the size of the input data during the processing of user fields in incoming HTTP packets. Exploiting...

Microsoft Edge browser’s vulnerability, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the SMB1 protocol implementation in the Samba network communication software allows a perpetrator to induce a service failure.

The vulnerability of the SMB1 protocol implementation in the Samba networking software lies in the fact that the operation values are written outside the buffer in memory during the range checking process. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

CVE-2022-35928 AES Crypt for Linux Password Security Vulnerability

AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and having the version number 3.11 has a vulnerability with respect to reading user-provided passwords and confirmations via command-line prompts. Passwords lengths were not checke...