PT-2024-5399

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential out-of-bounds condition when the buffer offset fields of a few requests are invalid in the Linux kernel's ksmbd implementation. This could allow an...

The vulnerability in the avatar loading function of the OTRS application allows a violator to execute arbitrary code.

The vulnerability of the avatar loading function in the OTRS application relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

OESA-2024-1112 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel before 6.5.9, there is a NULL pointer dereference in sendacknowledge in net/nfc/nci/spi.c.CVE-2023-46343 In the Linux kernel before 6.4.12, amdgpucswaitallfences in drivers/gpu/drm/amd/amdgpu/amdgpucs.c has a...

OESA-2024-1114 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel before 6.5.9, there is a NULL pointer dereference in sendacknowledge in net/nfc/nci/spi.c.CVE-2023-46343 In the Linux kernel before 6.4.12, amdgpucswaitallfences in drivers/gpu/drm/amd/amdgpu/amdgpucs.c has a...

An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an smb_strndup_from_utf16 out-of-bounds access because the relationship between Name data and CreateContexts data is mishandled.

...

SUSE CVE-2024-22705

An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2getdataarealen in fs/smb/server/smb2misc.c can cause an smbstrndupfromutf16 out-of-bounds access because the relationship between Name data and CreateContexts data is mishandled...

AZL-33961 CVE-2024-22705 affecting package kernel for versions less than 5.15.148.1-1

An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2getdataarealen in fs/smb/server/smb2misc.c can cause an smbstrndupfromutf16 out-of-bounds access because the relationship between Name data and CreateContexts data is mishandled...

DEBIAN-CVE-2024-22705

An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2getdataarealen in fs/smb/server/smb2misc.c can cause an smbstrndupfromutf16 out-of-bounds access because the relationship between Name data and CreateContexts data is mishandled...

The vulnerability of the Packet Forwarding Engine (PFE) in Juniper Networks’ Junos operating system, which allows a hacker to gain access to confidential data

The vulnerability of the packet forwarding engine PFE in Juniper Networks’ Junos operating system is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

PT-2024-1381

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.10 Description The issue is related to the smb2 get data area len function in the fs/smb/server/smb2misc.c file of the KSMBD file system in the Linux kernel. It is associated with an out-of-bounds access in t...

The vulnerability of the Jeecg P3 Biz Chat plugin for the WordPress content management system allows a hacker to read arbitrary files.

The vulnerability of the Jeecg P3 Biz Chat plugin for the WordPress content management system is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow a malicious actor, operating remotely, to read arbitrary files...

PT-2023-6244 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: The issue is related to a vulnerability in the Bluetooth module of the HarmonyOS operating system, which is associated with information disclosure in an error data area. It may also invol...

PT-2023-6248 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: The issue is related to a broadcast permission control vulnerability in the Bluetooth module. Successful exploitation of this vulnerability can cause the Bluetooth function to be...

The vulnerability of the WebExtension component in the Firefox web browser, related to the disclosure of information in the erroneous data area, allows attackers to gain access to confidential data.

The vulnerability of the WebExtension component in the Firefox web browser is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data...

The vulnerability of the Codesys industrial automation software suite, related to the disclosure of information in the erroneous data area, allows a intruder to gain unauthorized access or cause service failures.

The vulnerability of the Codesys industrial automation software suite is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an intruder to gain unauthorized access or cause service failures...

PT-2023-2839 · 3S Smart Software Solutions · Codesys

Name of the Vulnerable Software and Affected Versions: Codesys versions affected versions not specified Description: The issue is related to the disclosure of information in an error data area, potentially allowing a remote attacker to impact data integrity. Recommendations: At the moment, there ...

A vulnerability in the web interface for operating systems ArubaOS, allowing a hacker to read arbitrary files

The vulnerability in the web interface for operating systems ArubaOS relates to the disclosure of information in the error data area. Exploiting this vulnerability allows a remote attacker to read arbitrary files...

The vulnerability of the HTTP.sys driver on Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the HTTP.sys driver in Windows operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SUSE CVE-2023-0597

A flaw possibility of memory leak in the Linux kernel cpuentryarea mapping of X86 CPU data to memory was found in the way user can guess location of exception stacks or other important data. A local user could use this flaw to get access to some important data with expected location in memory...

The vulnerability of the SPNEGO security mechanism for Microsoft Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the SPNEGO NEGOEX security mechanism for Microsoft Windows operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...