CVE-2023-33383

Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload...

PT-2023-24326 · Allterco · Shelly 4Pm Pro

Name of the Vulnerable Software and Affected Versions: Shelly 4PM Pro four-channel smart switch version 0.11.0 Description: The issue allows an attacker to trigger a BLE out of bounds read fault condition, resulting in a device reload. This is due to an authentication bypass via an out-of-bounds...

CVE-2023-33383

Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload...

CVE-2023-33383

Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload...

CVE-2023-33383

CVE-2023-33383 affects Shelly 4PM Pro four-channel smart switch, firmware version 0.11.0. The vulnerability is a BLE out-of-bounds read fault condition that can trigger a device reload. Multiple connected sources (Red Hat advisory, NVD entry, CVE listings, Exploit-DB page) corroborate an out-of-b...

ngiflib Security Vulnerabilities

ngiflib is a library for decoding the GIF image format written in C. It has a vulnerability that stems from a segmentation error in the main method of the gif2tag.c file. A security vulnerability exists in ngiflib, which is caused by a segmentation error in the main method of the gif2tag.c file...

ngiflib Security Vulnerabilities

ngiflib is a library for decoding the GIF image format written in C. The vulnerability exists in ngiflibSDL.c file. A security vulnerability exists in ngiflib, which stems from a segmentation error in the SDLLoadAnimatedGif method of the ngiflibSDL.c file...

Moxa AWK-3131A HTTP GET Denial of Service (CVE-2016-8723)

An exploitable null pointer dereference exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Any HTTP GET request not preceded by an '/' will cause a segmentation fault in the web server. An attacker can send any of a multitude of potentially...

kernel: KVM: x86/mmu: race condition in direct_page_fault()

A flaw was found in the Linux kernel in the KVM. A race condition in directpagefault allows guest OS users to cause a denial of service host OS crash or host OS memory corruption when nested virtualization and the TDP MMU are enabled...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2522)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2509)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 22.04 LTS / 23.04 : LLVM Toolchain vulnerabilities (USN-6258-1)

The remote Ubuntu 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6258-1 advisory. It was discovered that LLVM Toolchain did not properly manage memory under certain circumstances. If a user were tricked into opening a specially...

CVE-2023-29934

A flaw was found in the llvm package. A segmentation fault via the mlir::Type::getDialect component may lead to a crash...

CVE-2023-29933

A flaw was found in the llvm package. A segmentation fault via the mlir::Block::getArgument component may lead to a crash...

CVE-2023-29932

A flaw was found in the llvm package. A segmentation fault via the mlir::IROperandmlir::OpOperand component may lead to a crash...

CVE-2023-29941

A flaw was found in the llvm package. A segmentation fault via the matchAndRewriteSortOpmlir::sparsetensor::SortOp component may lead to a crash...

CVE-2023-29942

A flaw was found in the llvm package. A segmentation fault via the mlir::Type::isamlir::LLVM::LLVMVoidType component may lead to a crash...

Envoy 资源管理错误漏洞

Envoy is an open source distributed proxy server. A resource management error vulnerability exists in Envoy that stems from a CORS filter will segment error and crash Envoy...

OSV-2023-604 Segv on unknown address in ucl_object_free_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60789 Crash type: Segv on unknown address Crash state: uclobjectfreeinternal uclparserfree ucladdstringfuzzer.c...

Buffer Overflow

libasn1c.so is vulnerable to Stack-based buffer overflow. The vulnerability is due to vulnerable function genhashget which results in segmentation fault crashing of application while processing ASN.1 module files and producing the C++ compatible C source code which can be used to...