Oracle Linux 8 : webkit2gtk3 (ELSA-2022-6540)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6540 advisory. 2.36.7-1 - Update to 2.36.7 Related: 2123429 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

CVE-2022-32912

A vulnerability was found in webkitgtk, where an out-of-bounds read was addressed with improved bounds checking. Processing maliciously crafted web content may lead to arbitrary code execution...

Tenda AC21 Buffer Overflow Vulnerability

Tenda AC21 is a wireless router from Tenda China. Tenda AC21 V16.03.08.15 is vulnerable to a buffer overflow vulnerability, which originates in the formfastsettingwifiset function of /bin/httpd for lack of length checking of input data, and can be exploited by an attacker to cause httpd to restar...

Tenda AC21 fromSetWifiGusetBasic function buffer overflow vulnerability

The Tenda AC21 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC21 version V16.03.08.15, which stems from the lack of length checking of input data in the fromSetWifiGusetBasic function of /bin/httpd, which can be exploited to cause httpd to...

CVE-2022-32912

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-32788

A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. A remote user may be able to cause kernel code execution...

CVE-2022-32788

A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. A remote user may be able to cause kernel code execution...

Buffer overflow

A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. A remote user may be able to cause kernel code execution...

CVE-2022-32788

A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. A remote user may be able to cause kernel code execution...

CVE-2022-32788

A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. A remote user may be able to cause kernel code execution...

CVE-2022-32788

CVE-2022-32788 is a buffer overflow in Apple’s AppleAVD component that could allow a remote attacker to cause kernel code execution. Affected products include watchOS 8.7, tvOS 15.6, iOS 15.6, iPadOS 15.6, and macOS Monterey 12.5. The issue was mitigated by applying bounds checking improvements a...

Tenda RX9 Pro setIPv6Status buffer overflow vulnerability

Tenda RX9 Pro is a wireless router from Tenda, China. Tenda RX9 Pro is vulnerable to a buffer overflow vulnerability caused by a lack of length checking of incoming data by setIPv6Status, which could be exploited by an attacker to cause code execution or denial of service...

GSD-2022-1006286 loop: Check for overflow while configuring loop

loop: Check for overflow while configuring loop This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.327 by commit...

GSD-2022-1005734 bpf: Don't use tnum_range on array range checking for poke descriptors

bpf: Don't use tnumrange on array range checking for poke descriptors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...

PT-2022-34130 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue concerns the support for PEC Packet Error Checking in SMBus block read operations. It was introduced in version v3.15 and fixed in version v5.10.137. The actual impact and attack...

PT-2022-34289 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue concerns the support for PEC Packet Error Checking in SMBus block read operations. It was introduced in version v3.15 and fixed in version v5.4.211. The actual impact and attack...

PT-2022-33792 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to incorrect bounds checking for stream encoder instances for DCN303 in the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2022-34460

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.291 Description The issue is related to the i740 calc vclk function in the i740fb module of the Linux Kernel. The problem arises from insufficient checking of the argument passed to this function. Although...

PT-2022-33992

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.140 Description The issue concerns array range checking for poke descriptors in the bpf module. It was introduced in version v5.5 and fixed in version v5.10.140. The actual impact and attack plausibility ha...

PT-2022-34547 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.326 Description: The issue is related to the i740 calc vclk function in the i740fb module of the Linux Kernel. The problem arises from the lack of proper argument checking in this function. The actual impac...