7003 matches found
OESA-2022-1974 squid security update
Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: Exposure of Sensitive Information in Cache Manager...
OpenWrt header_value Function Use-After-Free
The vulnerability of the headervalue function in the embedded operating system OpenWrt relates to the ability to read data beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information by sending a specially craft...
Qualcomm WLAN HOST system DoS or code execution
The vulnerability of the WLAN HOST microprogramming system component in Qualcomm’s embedded chips relates to the lack of checks for buffer length and reading beyond the memory boundary during frame decompression. Exploiting this vulnerability can allow a remote attacker to cause service failures ...
Audio Component Qualcomm DoS Execution Code
The vulnerability of the Audio component in embedded Qualcomm software lies in the lack of checks for buffer length and reading beyond the memory boundary. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
Linux audio subsystem Heap Buffer Overflow Privilege Escalation
The vulnerability of the getctlidhash function in the audio subsystem of Linux operating systems is related to reading data beyond the buffer boundaries in memory when processing the parameter id-name. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause system...
Qualcomm Bluetooth Host System Unauthorized Access
The vulnerability of the Bluetooth HOST microprogramming system component in Qualcomm embedded chips relates to the lack of checks on buffer length and reading beyond the memory boundary when processing the l2cap parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized...
httpd: mod_lua: Information disclosure with websockets
A flaw was found in the modlua module of httpd. The data returned by the wsread function may point past the end of the storage allocated for the buffer, resulting in information disclosure...
OpenCV cv::RBaseStream::readBlock Heap Buffer Overflow DoS
The vulnerability of the cv::RBaseStream::readBlock function in the modules/imgcodecs/src/bitstrm.cpp file of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to reading data beyond the allowed buffer limits. Exploiting this...
LibRaw internal dcraw_common.cpp DoS
The vulnerability of the internal/dcrawcommon.cpp component in the LibRaw image processing library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
LibRaw internal/dcraw_common.cpp Heap Buffer Overflow DoS
The vulnerability of the internal/dcrawcommon.cpp component in the LibRaw image processing library relates to reading data beyond the permissible buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
Libgit2 ng_pkt Buffer Overflow DoS
The vulnerability of the ngpkt function in the transports/smartpkt.c component of the Git methods implemented in the C language, Libgit2, relates to reading data from beyond the buffer’s acceptable limits. Exploiting this vulnerability allows a remote attacker to cause service failures...
Libstb stb_image.h Buffer Overflow DoS
The vulnerability of the stbimage.h component in the C/C++ Libstb library is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service interruptions...
Vim src/window.c Heap Buffer Overflow
The vulnerability in the src/window.c component of the Vim text editor is related to reading data beyond the buffer’s allowed limits. Exploiting this vulnerability allows an attacker to gain access to confidential data...
UBUNTU-CVE-2022-41318
A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a...
Libssh2 kex_method_diffie_hellman_group_exchange_sha256_key_exchange
The vulnerability of the kexmethoddiffiehellmangroupexchangesha256keyexchange function in the kex.c component of the SSH2 protocol implementation library Libssh2 is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to gain access to...
LDNS Heap Buffer Overflow Info Disclosure
The vulnerability of the ldnsrrnewfrmstrinternal function in the DNS library LDNS is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...
Trend Micro Deep Security Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Deep Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...
DEBIAN-CVE-2022-2881
The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process...
