dmidecode: dump-bin to overwrite a local file

A vulnerability was found in dmidecode, which allows -dump-bin to overwrite a local file. This issue may lead to the execution of dmidecode via Sudo...

Siemens QMS Automotive Information Leakage Hole

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive has an information disclosure hole that can be exploited by an attacker to perform a memory dump, gain access to credentials, and use them in a simulation...

qemu-kvm security and bug fix update

7.2.0-14.el92.5 - rhel guest failed boot with multi disks on error Failed to start udev Wait for Complete Device Initialization - CVE-2023-3354 QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service - hotplug/hotunplug mlx vdpa device to the...

CVE-2023-40724

A vulnerability has been identified in QMS Automotive All versions V12.39. User credentials are found in memory as plaintext. An attacker could perform a memory dump, and get access to credentials, and use it for impersonation...

Design/Logic Flaw

A vulnerability has been identified in QMS Automotive All versions V12.39. User credentials are found in memory as plaintext. An attacker could perform a memory dump, and get access to credentials, and use it for impersonation...

CVE-2023-40724

The CVE-2023-40724 entry applies to Siemens QMS Automotive (all versions prior to v12.39). Root cause: user credentials are stored in plaintext in memory, enabling an attacker with the ability to perform a memory dump to access credentials and impersonate users. Impact, per sources: credential ex...

CVE-2023-40724

A vulnerability has been identified in QMS Automotive All versions V12.39. User credentials are found in memory as plaintext. An attacker could perform a memory dump, and get access to credentials, and use it for impersonation...

dmidecode: dump-bin to overwrite a local file

A vulnerability was found in dmidecode, which allows -dump-bin to overwrite a local file. This issue may lead to the execution of dmidecode via Sudo...

ALSA-2023:5094 Important: qemu-kvm security and bug fix update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote...

How Microsoft's highly secure environment was breached

An investigation by Microsoft has finally revealed how China-based hackers circumvented the protections of a "highly isolated and restricted production environment" in May 2023 to unlock sensitive email accounts belonging to US government agencies. The attack was first reported by Microsoft in...

Outlook Hack: Microsoft Reveals How a Crash Dump Led to a Major Security Breach

Microsoft on Wednesday revealed that a China-based threat actor known as Storm-0558 acquired the inactive consumer signing key to forge tokens and access Outlook by compromising an engineer's corporate account. This enabled the adversary to access a debugging environment that contained informatio...

The vulnerability of the nft_verdict_dump() function in the net/netfilter/nf_tables_api.c module of the Linux kernel’s netfilter component allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nftverdictdump function in the net/netfilter/nftablesapi.c module of the Linux kernel’s netfilter component is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromis...

SUSE CVE-2020-19187

Buffer Overflow vulnerability in fmtentry function in progs/dumpentry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...

DEBIAN-CVE-2020-19188

Buffer Overflow vulnerability in fmtentry function in progs/dumpentry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...

DEBIAN-CVE-2020-19187

Buffer Overflow vulnerability in fmtentry function in progs/dumpentry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...

DEBIAN-CVE-2020-19185

Buffer Overflow vulnerability in oneonemapping function in progs/dumpentry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...

UBUNTU-CVE-2020-19187

Buffer Overflow vulnerability in fmtentry function in progs/dumpentry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...

PT-2023-11512 · Ncurses +1 · Ncurses +1

Name of the Vulnerable Software and Affected Versions: ncurses version 6.1 Description: The issue is related to a Buffer Overflow vulnerability in the one one mapping function in progs/dump entry.c:1373. This allows remote attackers to cause a denial of service via crafted commands. The...

ncurses 缓冲区错误漏洞

ncurses is a character terminal processing library that provides a set of functions that can be called by the user to generate a text-based user interface. A security vulnerability exists in ncurses version 6.1 due to a buffer overflow in the fmtentry method of progs/dumpentry.c. The vulnerabilit...

The vulnerability of the dumpppp function in the pppdump/pppdump.c component of the Point-to-Point Ppp protocol allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the dumpppp function in the pppdump/pppdump.c component of the Point-to-Point Ppp protocol is related to the issue of the operation’s output going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential...