OpenImageIO Project OpenImageIO IFFOutput wild write vulnerability

Talos Vulnerability Report TALOS-2022-1656 OpenImageIO Project OpenImageIO IFFOutput wild write vulnerability December 22, 2022 CVE Number CVE-2022-43601,CVE-2022-43600,CVE-2022-43599,CVE-2022-43602 SUMMARY Multiple code execution vulnerabilities exist in the IFFOutput::close functionality of...

CVE-2021-33640

After tarclose, libtar.c releases the memory pointed to by pointer t. After tarclose is called in the list function, it continues to use pointer t: freelonglinklongnamet-thbuf . As a result, the released memory is used use-after-free...

## MALICIOUS OWNER CAN CLOSE AND WITHDRAW AS HE WANT

Lines of code Vulnerability details MALICIOUS OWNER CAN CLOSE AND WITHDRAW AS HE WANT These functions below are set some emergency scenarios. But caviar.Owner able to triggered these functions as he want. Need to set some require statement in order to actually check these scenarios before his...

UBUNTU-CVE-2022-23493

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contain a Out of Bound Read in xrdpmmtransprocessdrdynvcchannelclose function. There are no known workarounds for this issue. Users are advised to upgrade...

PT-2022-10275

Name of the Vulnerable Software and Affected Versions libtar affected versions not specified Description The issue arises after tar close is called, where libtar.c releases the memory pointed to by pointer t. However, the list function continues to use pointer t, specifically in the call to free...

PT-2022-5894

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.9.21 Description The issue is related to an Out of Bound Read in the xrdp mm trans process drdynvc channel close function. This can allow a remote attacker to gain unauthorized access to protected information or cause ...

xrdp 缓冲区错误漏洞

xrdp is an open source remote desktop protocol server from Neutrinolabs Labs. A buffer error vulnerability exists in xrdp versions prior to v0.9.21, which stems from the inclusion of an out-of-bounds read in the xrdpmmtransprocessdrdynvcchannelclose function...

Upgraded Q -> H from #439 [1670433195074]

Judge has assessed an item in Issue 439 as H risk. The relevant finding follows: L02 - close should not be able to close a specific id credit line As per the docs: Can a Borrower chose to repay any debt in any order? No. The app automatically selects which credit line can be repaid using a...

PT-2024-11849 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.0.8-1-default Description: A crash in the slcan driver occurs due to a freed work crash. The LTP test pty03 causes this crash, resulting in a kernel NULL pointer dereference. The issue arises when the slcan's ...

PT-2024-11878 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc5 Description: A bug in the Linux kernel has been resolved, specifically in the mptcp protocol. The issue occurred when a sleeping function was called from an invalid context at close time, resulting in ...

bind: DoS from specifically crafted TCP packets

A flaw was found in Bind that incorrectly handles certain crafted TCP streams. The vulnerability allows TCP connection slots to be consumed for an indefinite time frame via a specifically crafted TCP stream sent from a client. This flaw allows a remote attacker to send specially crafted TCP strea...

kernel: mptcp: fix race on unaccepted mptcp sockets

A flaw was found in the Linux kernel. A race condition in the Multipath TCP MPTCP subsystem occurs when a listening socket is closed while handling unaccepted connections. A local user could exploit this timing issue to trigger a use-after-free condition, where the kernel accesses memory that has...

PT-2022-6807

Name of the Vulnerable Software and Affected Versions OpenImageIO version 2.4.4.2 Description A denial of service issue exists in the DPXOutput::close functionality of OpenImageIO. This is due to errors in pointer dereferencing. An attacker can trigger this issue by providing malicious input,...

PT-2022-6817

Name of the Vulnerable Software and Affected Versions OpenImageIO version 2.4.4.2 Description A denial of service issue exists in the ZfileOutput::close functionality of OpenImageIO. This can be triggered by a specially crafted ImageOutput Object, allowing an attacker to cause a denial of service...

UBUNTU-CVE-2022-3977

A use-after-free flaw was found in the Linux kernel MCTP Management Component Transport Protocol functionality. This issue occurs when a user simultaneously calls DROPTAG ioctl and socket close happens, which could allow a local user to crash the system or potentially escalate their privileges on...

PT-2022-6814 · Unknown +1 · Openimageio +1

Name of the Vulnerable Software and Affected Versions: OpenImageIO version 2.4.4.2 Description: Multiple code execution vulnerabilities exist in the IFFOutput::close functionality of OpenImageIO. A specially crafted ImageOutput Object can lead to a heap buffer overflow. This issue arises when the...

PT-2022-6806

Name of the Vulnerable Software and Affected Versions OpenImageIO version 2.4.4.2 Description An information disclosure issue exists in the DPXOutput::close functionality. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious input to trigger this...

PT-2022-6813

Name of the Vulnerable Software and Affected Versions OpenImageIO version 2.4.4.2 Description Multiple code execution vulnerabilities exist in the IFFOutput::close functionality. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to...

kernel: mptcp: fix race on unaccepted mptcp sockets

A flaw was found in the Linux kernel. A race condition in the Multipath TCP MPTCP subsystem occurs when a listening socket is closed while handling unaccepted connections. A local user could exploit this timing issue to trigger a use-after-free condition, where the kernel accesses memory that has...

bind: DoS from specifically crafted TCP packets

A flaw was found in Bind that incorrectly handles certain crafted TCP streams. The vulnerability allows TCP connection slots to be consumed for an indefinite time frame via a specifically crafted TCP stream sent from a client. This flaw allows a remote attacker to send specially crafted TCP strea...