OESA-2023-1679 opensc security update

OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the standard APIs to sma...

Parasolid 3D geometric modeling tool Teamcenter Visualization Code Execution

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization lifecycle management system lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code...

CVE-2023-34319: Out-of-bounds Write

The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many piece...

SUSE-SU-2023:3600-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of...

LibRaw Stretch DoS

The vulnerability of the LibRaw::stretch function in the image processing library LibRaw is related to the situation where the operation’s output goes beyond the buffer boundaries in memory when processing CRW files. Exploiting this vulnerability could allow a remote attacker to cause service...

libeconf Heap Buffer Overflow DoS

The vulnerability of the econfwriteFile function in the libeconf configuration analysis and management library is related to the issue of writing operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary cod...

C-ares Heap Buffer Overflow DoS

The vulnerability of the aresparsesoareply function in the C-ares library related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

GNU Binutils Development Environment Function Code Execution

The vulnerability of the findsectioninset function in the GNU Binutils development toolset, located in the readelf.c file, relates to the issue of operations going beyond the buffer boundaries when processing ELF files. Exploitation of this vulnerability could allow an attacker to execute arbitra...

Adobe Dimension Buffer Overflow Info Disclosure

The vulnerability of Adobe Dimension’s 3D design software relates to the execution of operations beyond the buffer boundaries in memory when processing GLB files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially create...

ROS-20230915-11

A vulnerability in the Base plugin gst-plugins-base of the Gstreamer multimedia framework is related to a buffer overrun during the parsing and decoding of subtitles from SRT files. operation outside the memory buffer when parsing and decoding subtitles from SRT files. Exploitation exploitation o...

CLFS driver Privilege Escalation

The vulnerability of the CLFS driver in Windows operating systems is related to the issue where operations exceed the buffer boundaries in memory when processing BLF log files. Exploiting this vulnerability can allow attackers to gain increased privileges...

CLFS Driver Privilege Escalation

The vulnerability of the CLFS driver in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and increase their privileges...

SUSE-SU-2023:3601-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local attacker with a user account on the system to gain privilege,...

PDF Buffer Overflow

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the execution of operations beyond the buffer in memor...

CpmDisplayFeatureSmm Buffer Overflow Code Execution

The vulnerability of the CpmDisplayFeatureSmm component in AMD microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

D-Link DAP-2622 Code Execution

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

libsolv resolve_dependencies DoS

The vulnerability of the resolvedependencies function in the libsolv library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

libtiff DoS

The vulnerability of the tiffcrop utility tools/tiffcrop.c:3516 in the libtiff library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

tiffcrop libtiff DoS

The vulnerability of the tiffcrop utility libtiff/tifunix.c:368, tools/tiffcrop.c:2903, tools/tiffcrop.c:6778 in the libtiff library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

libtiff DoS

The vulnerability of the tiffcrop utility tools/tiffcrop.c:3724 in the libtiff library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...