4855 matches found
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: xhci: Properly handling isoc Babble and Buffer Overrun events. xHCI 4.9 explicitly prohibits making assumptions that the xHC has released its ownership of a multi-TRB TD when an error occurs in one of the early TRBs. However,...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: ALSA: hda/ca0132: fixed a buffer overflow issue in tuningctlset The tuningctlset function might cause a buffer overflow if it does not break the loop after matching A. static int tuningctlset... for i = 0; i TUNINGCTLSCOUNT; i...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: comedi: me4000: Fix potential overrun of the firmware buffer The function requestfirmware requests the firmware that needs to be downloaded. It is possible for this process to exceed the source buffer’s capacity due to reliance o...
Astra Linux – Vulnerability in openssl, openssl1.0
ASN.1 strings are internally represented within OpenSSL as an ASN1STRING structure, which contains a buffer for storing the string data and a field for storing the buffer length. This is different from regular C strings, which are represented as a buffer for the string data, terminated with a NUL...
Astra Linux – Vulnerability in PHP 7.3
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16, and 8.2.X before 8.2.3, the core path resolution function allocates a buffer that is one byte too small. When resolving paths with lengths close to the system’s MAXPATHLEN setting, this may result in the byte after the allocated buffer being...
Astra Linux – Vulnerability in libzstd
A vulnerability was discovered in zstd v1.4.10, where an attacker can provide an empty string as an argument to the command-line tool, causing a buffer overflow...
kernel: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend
A flaw was found in the Bluetooth subsystem of the Linux kernel, specifically within the hcisync component. This vulnerability occurs when the hciadvbcastannoucement function attempts to prepend Broadcast Announcement service data to an existing advertising payload that is already at its maximum...
CVE-2023-24288
An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service DoS via creating an excessive amount of save states...
UBUNTU-CVE-2023-24284
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the ismarkable function...
CVE-2023-24285
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed...
UBUNTU-CVE-2023-24288
An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service DoS via creating an excessive amount of save states...
CVE-2023-24291
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter...
CVE-2023-24286
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter...
UBUNTU-CVE-2023-24287
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command...
CVE-2023-24284
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the ismarkable function...
UBUNTU-CVE-2023-24286
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter...
UBUNTU-CVE-2023-24285
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed...
UBUNTU-CVE-2023-24291
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter...