13812 matches found
OESA-2023-1484 sqlite security update
SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...
CVE-2023-20589
A flaw was found in hw. This flaw allows an attacker with specialized hardware and physical access to an impacted device to perform a voltage fault injection attack, compromising the ASP secure boot and potentially leading to arbitrary code execution. Mitigation Mitigation for this issue is eithe...
CVE-2023-20589
An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution...
Design/Logic Flaw
An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution...
CVE-2023-20589 fTPM Voltage Fault Injection
An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution...
CVE-2023-20589
The CVE-2023-20589 entry corresponds to a voltage fault injection vulnerability affecting fTPM ASP secure boot on AMD Ryzen platforms (Zen 1/2/3). The AMD-SB-4005 bulletin provides concrete details: potential arbitrary code execution via physical access and specialized hardware, impacting a wide ...
PT-2023-17470 · Amd · Ryzen™ Threadripper™ 5000 Series Processors +93
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack, resulting in th...
AMD μProf Security Vulnerability
AMD μProf is a performance analysis tool from UltraMicroelectronics AMD for applications running on Windows, Linux, and FreeBSD operating systems. A security vulnerability exists in AMD μProf that stems from insufficient validation of the IOCTL input buffer, which could allow an attacker to send ...
fTPM Voltage Fault Injection
Bulletin ID: AMD-SB-4005 Potential Impact: Arbitrary Code Execution Severity: High Summary CVE-2023-20589 Researchers at the Technische Universität Berlin have reported the use of voltage fault injection attacks on ASP secure boot targeting fTPM. An attacker with specialized hardware and physical...
AMD Ryzen Security Breach
AMD Ryzen is a central processing unit CPU from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Ryzen that originates from a vulnerability that allows an attacker to perform a voltage fault injection attack that compromises the ASP secure boot and results in arbitrary code...
Denial Of Service (DoS)
advancecomp is vulnerable to Denial of Service DoS attacks. A segmentation fault found in the library allows a local authenticated attacker to cause an application crash...
Integer Overflow
vim is vulnerable to Integer Overflow. The vulnerability exists in egtilde function at regexp.c due to a segmentation fault which allows an attacker to exhausts memory causing an overflow...
SUSE SLES12 Security Update : mariadb (SUSE-SU-2023:3174-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3174-1 advisory. - CVE-2022-32084: Fixed segmentation fault via the component subselect bsc1201164. Tenable has extracted the preceding description block...
SUSE: Security Advisory (SUSE-SU-2023:3174-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2023:3174-1 Security update for mariadb
This update for mariadb fixes the following issues: - CVE-2022-32084: Fixed segmentation fault via the component subselect bsc1201164...
CVE-2023-33370
An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the main web server of IDSecure to fault and crash, causing a denial of service...
Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2554)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-39114
ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDLLoadAnimatedGif at ngiflibSDL.c. This vulnerability is triggered when running the program SDLaffgif...