Information disclosure

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE...

CVE-2023-28586

CVE-2023-28586 concerns an information disclosure in Qualcomm-chipset TZ Secure OS when loading an ELF in a trusted execution environment (TEE). The root cause is described in sources as accessing trusted application metadata symbol addresses during ELF load, potentially exposing confidential dat...

CVE-2023-28586 Improper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OS

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE...

CVE-2023-28586 Improper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OS

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE...

CVE-2023-28585 Integer Overflow to Buffer Overflow in TZ Secure OS

Memory corruption while loading an ELF segment in TEE Kernel...

CVE-2023-28585

CVE-2023-28585 is a memory corruption issue in the TZ Secure OS/Tee Kernel triggered when loading an ELF segment. Multiple connected sources identify the root cause as memory corruption within the TEE Kernel during ELF segment loading, with the TZ Secure OS context (Qualcomm components) cited in ...

CVE-2023-28585 Integer Overflow to Buffer Overflow in TZ Secure OS

Memory corruption while loading an ELF segment in TEE Kernel...

PT-2023-29726 · Buildroot +1 · Buildroot +1

Name of the Vulnerable Software and Affected Versions: Buildroot versions 2023.08.1 through 2023.08.1 Buildroot dev commit 622698d7847 Description: Multiple data integrity vulnerabilities exist in the package hash checking functionality. A specially crafted man-in-the-middle attack can lead to...

CVE-2023-45840: Download of Code Without Integrity Check

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...

CVE-2023-28586: Improper Restriction of Operations within the Bounds of a Memory Buffer

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE...

PT-2023-21832 · Unknown · Tee Kernel

Name of the Vulnerable Software and Affected Versions: TEE Kernel affected versions not specified Description: The issue is related to memory corruption that occurs while loading an ELF segment in the TEE Kernel. Recommendations: At the moment, there is no information about a newer version that...

RHEL 8 : binutils (RHSA-2023:7394)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7394 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar...

Oracle Linux 9 : binutils (ELSA-2023-6593)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6593 advisory. 2.35.2-42.0.1 - Forward-port Oracle patches to 2.35.2-42. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Alert: OracleIV DDoS Botnet Targets Public Docker Engine APIs to Hijack Containers

Publicly-accessible Docker Engine API instances are being targeted by threat actors as part of a campaign designed to co-opt the machines into a distributed denial-of-service DDoS botnet dubbed OracleIV. "Attackers are exploiting this misconfiguration to deliver a malicious Docker container, buil...

GNU Binutils Dwarf2 C Buffer Overflow DoS

The vulnerability of the decodelineinfo function in the dwarf2.c component of the GNU Binutils development environment is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability allows a malicious actor to cause service failures through...

GNU Binutils read_formatted_entries Heap Buffer Overflow DoS

The vulnerability of the readformattedentries function in the dwarf2.c component of the GNU Binutils development environment is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially...

GNU Binutils Development Environment Component Heap Buffer Overflow DoS

The vulnerability of the dwarf1.c component in the GNU Binutils development environment is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...

GNU Binutils Dwarf2 C Buffer Overflow DoS

The vulnerability of the decodelineinfo function in the dwarf2.c component of the GNU Binutils development environment is related to the lack of checks for division by zero. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF file...

GNU Binutils ELF BFD Buffer Overflow DoS

The vulnerability of the ISCONTAINEDBYLMA macro in the bfd/elf.c component of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure...

GNU Binutils find_abstract_instance Heap Buffer Overflow DoS

The vulnerability of the findabstractinstance function in the bfd/dwarf2.c component of the GNU Binutils development environment is related to an uncontrolled recursion. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created ELF file...