PT-2022-35029 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a use-after-free error on the source server when performing inter-server copy. This problem is noted in the context of NFSD. The actual impact and potential for attack...

XPDF 缓冲区错误漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF v4.04 version of a security vulnerability , the vulnerability stems from the attacker can be achieved through its xpdf/Stream.cc component of the...

PT-2022-35237 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue is related to a potential security problem in the cifs copy file range function, which may lead to an xid leak. The actual impact and attack plausibility have not yet been proven...

PT-2022-26836 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: A stack overflow issue was discovered in the function FileStream::copy at xpdf/Stream.cc:795. This issue affects XPDF and can be exploited via the FileStream::copy function. Recommendations: For XPDF version 4.0...

CVE-2022-43295

XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy at xpdf/Stream.cc:795...

PT-2022-35748 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: The issue concerns the use of an inappropriate type for a variable in the drm copy field function. This could potentially lead to security vulnerabilities, although the actual impact and...

PT-2022-35747 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: The issue is related to the drm copy field function attempting to copy a NULL pointer. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35503 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to a use-after-free error on the source server when performing inter-server copy. The actual impact and attack plausibility have not yet been proven. Recommendations:...

CVE-2022-43295

XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy at xpdf/Stream.cc:795...

CVE-2022-43295

XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy at xpdf/Stream.cc:795...

PT-2022-35298 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to a use-after-free error on the source server when performing inter-server copy. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2022-35010 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns the use of an inappropriate type for a variable in the drm copy field function. This could potentially lead to security vulnerabilities, although the actual impact and atta...

PT-2022-35636 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: The issue prevents drm copy field from attempting to copy a NULL pointer. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2022-35008 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue prevents drm copy field from attempting to copy a NULL pointer. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

Upgraded Q -> M from #323 [1668467355303]

Judge has assessed an item in Issue 323 as M risk. The relevant finding follows: L00: beforeTokenTransfer function called with wrong params in LBToken Line 237 seems to be a copy pasta mistake from line 209 in LBToken.sol. On line 237 when burning tokens, to should be zero, and amount of from's...

PT-2022-34942 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.6 Description: The issue is related to a potential security problem in the cifs copy file range function, which may cause an xid leak. The actual impact and attack plausibility have not yet been proven...

PT-2022-35637 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: A potential security issue exists due to the use of an incorrect type for the len variable in the drm copy field function. The actual impact and attack plausibility have not yet been proven...

OESA-2022-2067 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

PT-2022-5483 · Unknown · Vport P06-1Mp-M12 +1

Name of the Vulnerable Software and Affected Versions: VPort P16-1MP-M12 affected versions not specified VPort P16-1MP-M12-IR affected versions not specified VPort P06-1MP-M12 affected versions not specified Description: The issue is related to a buffer copy without checking the size of the input...

tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c

A flaw was found in LibTIFF where a NULL source pointer passed as an argument to the memcpy function within the TIFFFetchNormalTag in tifdirread.c. This flaw allows an attacker with a crafted TIFF file to cause a crash that leads to a denial of service...