Fedora: Security Advisory for kitty (FEDORA-2023-ab43e2ce21)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

netty: SniHandler 16MB allocation leads to OOM

A flaw was found in Netty's SniHandler while navigating TLS handshake which may permit a large heap allocation if the handler did not have a timeout configured. This issue may allow an attacker to send a client hello packet which would cause the server to buffer large amounts of data per...

Snapshot fuzzing direct composition with WTF

Cisco Talos has developed a custom fuzzer using the popular snapshot fuzzer "WTF" which targets Direct Composition in Windows. Talos vulnerability research team used Protocol Buffers developed by Google to serialize and deserialize test cases. The Bochscpu backend of WTF was patched and other...

The vulnerability of MediaTek’s WLAN micro-programming software chip allows attackers to gain access to confidential information.

The vulnerability of the WLAN microprogramming software of MediaTek relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to access confidential information...

The vulnerability of the DriverKit component allows for arbitrary code execution on operating systems such as tvOS, iOS, iPadOS, watchOS, and macOS.

The vulnerability of the DriverKit component for operating systems such as tvOS, iOS, iPadOS, watchOS, and macOS relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Fedora: Security Advisory for golang-github-protobuf (FEDORA-2023-f122ea1b3e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for golang-google-protobuf (FEDORA-2023-f122ea1b3e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: golang-google-protobuf-1.31.0-4.fc38

Go support for Google's protocol buffers...

[SECURITY] Fedora 38 Update: golang-github-protobuf-1.5.3-3.fc38

Go support for Google's protocol buffers...

The vulnerability of the JPEG component of MediaTek’s microprogramming software allows attackers to gain access to confidential information.

The vulnerability of the JPEG component of MediaTek’s microprogramming software relates to reading data outside the buffer in memory. Exploiting this vulnerability could allow an attacker to access confidential information...

The vulnerability of MediaTek’s microprogramming software, related to reading data outside the buffer in memory, allows a hacker to gain access to confidential information.

The vulnerability of MediaTek’s microprogramming software relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

EVE OS Security Vulnerability

EVE OS is a general-purpose, open Linux-based operating system for distributed edge computing open-sourced by IF Edge. EVE OS suffers from a security vulnerability that stems from allowing an attacker to use data from a socket to freely allocate buffers on the stack, which could cause a system...

The vulnerability of TP-Link Archer C50, Archer C20, and Archer C2 Wi-Fi routers lies in the fact that the operation data can be accessed outside of the buffer in memory, allowing an attacker to cause a malfunction in the device.

The vulnerability of the microprogrammed software of TP-Link Archer C50, Archer C20, and Archer C2 Wi-Fi routers lies in the fact that the operation data is written outside the buffer in memory when processing request parameters. Exploiting this vulnerability can allow a remote attacker to cause...

The vulnerability of the libbfd library in the GNU Binutils development environment, related to reading beyond the buffer boundaries in memory, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the libbfd library in the GNU Binutils development environment, within the Debian GNU operating system, relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of PDF-XChange Editor’s document viewing and editing software lies in the possibility of an operation going beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2023-5294

Name of the Vulnerable Software and Affected Versions GCC versions prior to the fixed version Description A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in an...

protobuf-java: timeout in parser leads to DoS

A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted...

python-cryptography: memory corruption via immutable objects

A vulnerability was found in python-cryptography. In affected versions, Cipher.updateinto would accept Python objects which implement the buffer protocol but provide only immutable buffers. This issue allows immutable objects such as bytes to be mutated, thus violating the fundamental rules of...

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-2664)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the NFC microprogramming software services provided by the microcircuits S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82 allows a perpetrator to trigger a restart of the NFC service.

The vulnerability of the NFC microprogramming software services provided by the microcircuits S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82 lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to...