Security update for shadow

This update for shadow fixes the following issues: Fixed not copying of skel files bsc1228770 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE...

CVE-2024-57942

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix ceph copy to cache on write-begin At the end of netfsunlockreadfolio in which folios are marked appropriately for copying to the cache either with by being marked dirty and having their private data set or by having...

PT-2024-27266 · Qnap · Qnap Qts +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.2.1.2930 build 20241025 QNAP QuTS hero versions prior to h5.2.1.2929 build 20241025 Description: A buffer copy without checking the size of input issue has been reported, potentially allowing remote attackers with...

The vulnerability of the startread() function in the hcom.c component of the SoX sound processing software allows a hacker to cause a service failure.

The vulnerability of the startread function in the hcom.c component of the SoX sound processing program is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a attacker to cause a service failure using a specially created file...

PT-2024-5773 · Openbmc · Openbmc

Name of the Vulnerable Software and Affected Versions: OpenBMC versions affected versions not specified Description: The issue is related to a memory overflow problem in the slpd-lite daemon, which is a unicast SLP UDP server. This can be exploited by sending specially crafted SLP packets to the...

PT-2024-28520

Name of the Vulnerable Software and Affected Versions Junos OS Evolved on ACX7000 Series versions prior to 21.2R3-S8-EVO Junos OS Evolved on ACX7000 Series 21.4-EVO versions prior to 21.4R3-S7-EVO Junos OS Evolved on ACX7000 Series 22.2-EVO versions prior to 22.2R3-S4-EVO Junos OS Evolved on...

PT-2024-10417 · Zziplib +3 · Zziplib +3

Name of the Vulnerable Software and Affected Versions: zziplib version 0.13.77 Description: The issue is related to a buffer copy without input validation in the zzip fetch disk trailer function of the /zzip/zip.c component in the ZZIPlib archiving library. This can be exploited by a remote...

SUSE CVE-2021-41089

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where attempting to copy files using docker cp into a specially-crafted container can result in Unix file permission changes for existing files in the host's filesystem,...

PYSEC-2024-223

Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNXASSERT and ONNXASSERTM functions have an off by one string copy...

CVE-2023-45037 QTS, QuTS hero, QuTScloud

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

CVE-2023-41276 QTS, QuTS hero, QuTScloud

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

OSV-2023-1166 Memcpy-param-overlap in repeat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64176 Crash type: Memcpy-param-overlap Crash state: repeat pere pere...

PT-2023-27795 · Samsung · Modem 5123 +15

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem versions Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123 Description: A buffer copy issue,...

CVE-2023-33059 Buffer Copy Without Checking Size of Input in Audio

Memory corruption in Audio while processing the VOC packet data from ADSP...

PT-2023-7547 · Qnap · Qts

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 4.2.6 build 20230621 QTS versions prior to 4.3.3.2420 build 20230621 QTS versions prior to 4.3.4.2451 build 20230621 QTS versions prior to 4.3.6.2441 build 20230621 Description: The issue is related to a buffer copy...

PT-2022-17472 · Qualcomm · Snapdragon Mobile +1

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Connectivity, Snapdragon Mobile affected versions not specified Description: The issue is related to memory corruption in WLAN due to a buffer copy without checking the size of the input while parsing keys. This problem...

CVE-2022-23073

In Recipes, versions 1.0.5 through 1.2.5 are vulnerable to Stored Cross-Site Scripting XSS, in copy to clipboard functionality. When a victim accesses the food list page, then adds a new Food with a malicious javascript payload in the ‘Name’ parameter and clicks on the clipboard icon, an XSS...

The vulnerability of the jsG_markobject function in the jsgc.c component of the JavaScript MuJS interpreter allows a attacker to cause a service failure.

The vulnerability of the jsGmarkobject function in the jspc.c component of the JavaScript MuJS interpreter is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

CLSA-2022-1644855795 Fixed CVEs in vim: CVE-2022-0359, CVE-2022-0351, CVE-2022-0368, CVE-2022-0361

CVE-2022-0351: fix crash caused by too depth recursion - CVE-2022-0359: fix illegal memory access with large tabstop in ex mode - CVE-2022-0361: fix illegal memory access when copying lines in visual mode - CVE-2022-0368: fix illegal memory access when undo makes visual area invalid...

PYSEC-2022-82

Tensorflow is an Open Source Machine Learning Framework. The implementation of AssignOp can result in copying uninitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized to minimize number of...