4116 matches found
CVE-2022-25265
CVE-2022-25265 is a Linux kernel issue affecting binaries built around 2003 (e.g., GCC 3.2.2 with Linux 2.4.20) that can allow local attackers to execute code by exploiting exec-all attribute in non-executable regions. Connected advisories show the vulnerability being addressed as part of kernel/...
CVE-2022-0382
An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem, in the way a user sends a TIPC datagram to one or more destinations. This flaw allows a local user to read some kernel memory. This issue is limited to no more than 7 bytes, and the user...
OESA-2022-1511 expat security update
An XML parser library. Security Fixes: Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES.CVE-2022-23852 Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function.CVE-2022-23990...
PT-2022-36653
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the functions sgets, pdfi read bytes, and read xref entry...
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer for configurations with a nonzero XML_CONTEXT_BYTES.
...
UBUNTU-CVE-2022-0382
An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem, in the way a user sends a TIPC datagram to one or more destinations. This flaw allows a local user to read some kernel memory. This issue is limited to no more than 7 bytes, and the user...
golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header
A vulnerability was detected in net/http of the Go standard library when parsing very large HTTP header values, causing a crash and subsequent denial of service. This vulnerability affects both clients and servers written in Go, however, servers are only vulnerable if the value of MaxHeaderBytes...
Apple macOS ImageIO DDS image out-of-bounds read vulnerability
Summary An out-of-bounds read vulnerability exists in the DDS image parsing functionality of ImageIO library on Apple macOS Big Sur 11.6.1 and iOS 15.1. A specially-crafted DDS file can disclose sensitive memory content which can aid in exploitation of other vulnerabilities. An attacker can deliv...
DEBIAN-CVE-2022-23852
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
ALPINE-CVE-2022-23852
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
AZL-7835 CVE-2022-23852 affecting package expat for versions less than 2.4.8-1
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
UBUNTU-CVE-2022-23852
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
CVE-2022-23852
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
PT-2022-3811
Name of the Vulnerable Software and Affected Versions CentOS Web Panel versions prior to 0.9.8.1107 Description The issue is related to incorrect handling of code generation in CentOS Web Panel, allowing a remote attacker to execute arbitrary code using a specially crafted request. An...
PT-2022-36644
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as chunk obj alloc, chunk alloc bytes, and cmap endfbrang...
The vulnerability in the implementation of the ntfs_get_attribute_value function of the NTFS file system driver for the FUSE NTFS-3G module allows a malicious actor to gain unauthorized access to protected information or cause service failures.
The vulnerability of the ntfsgetattributevalue function in the NTFS file system driver for the FUSE NTFS-3G module is related to an incorrect check of the bytesinuse value. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service...
PT-2022-28297
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned, so the information cannot be provided. Description The issue arises from certain invalid inputs to ReadUvarint or ReadVarint functions, which could cause them to read an unlimited number of bytes...
GHSA-FF2R-XPWQ-6WHJ Use of Uninitialized Resource in gfx-auxil
Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...
GHSA-5VWC-R48G-WJ6C Abomonation transmutes &T to and from &[u8] without sufficient constraints
An issue was discovered in the abomonation crate through version 0.7.3 for Rust. Because transmute operations are insufficiently constrained, there can be an information leak or ASLR bypass...