Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : LibTIFF vulnerabilities (USN-6290-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6290-1 advisory. It was discovered that LibTIFF could be made to write out of bounds when processing certain malformed image...

ZOHO ManageEngine Applications Manager Cross-Site Scripting Vulnerability (CNVD-2023-64220)

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A cross-site scripting...

OESA-2023-1485 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

OESA-2023-1484 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

CVE-2023-20589

A flaw was found in hw. This flaw allows an attacker with specialized hardware and physical access to an impacted device to perform a voltage fault injection attack, compromising the ASP secure boot and potentially leading to arbitrary code execution. Mitigation Mitigation for this issue is eithe...

CVE-2023-20589

An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution...

Design/Logic Flaw

An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution...

CVE-2023-20589 fTPM Voltage Fault Injection

An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution...

CVE-2023-20589

The CVE-2023-20589 entry corresponds to a voltage fault injection vulnerability affecting fTPM ASP secure boot on AMD Ryzen platforms (Zen 1/2/3). The AMD-SB-4005 bulletin provides concrete details: potential arbitrary code execution via physical access and specialized hardware, impacting a wide ...

AMD μProf Security Vulnerability

AMD μProf is a performance analysis tool from UltraMicroelectronics AMD for applications running on Windows, Linux, and FreeBSD operating systems. A security vulnerability exists in AMD μProf that stems from insufficient validation of the IOCTL input buffer, which could allow an attacker to send ...

PT-2023-17470 · Amd · Ryzen™ Threadripper™ 5000 Series Processors +93

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack, resulting in th...

fTPM Voltage Fault Injection

Bulletin ID: AMD-SB-4005 Potential Impact: Arbitrary Code Execution Severity: High Summary CVE-2023-20589 Researchers at the Technische Universität Berlin have reported the use of voltage fault injection attacks on ASP secure boot targeting fTPM. An attacker with specialized hardware and physical...

AMD Ryzen Security Breach

AMD Ryzen is a central processing unit CPU from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Ryzen that originates from a vulnerability that allows an attacker to perform a voltage fault injection attack that compromises the ASP secure boot and results in arbitrary code...

Denial Of Service (DoS)

advancecomp is vulnerable to Denial of Service DoS attacks. A segmentation fault found in the library allows a local authenticated attacker to cause an application crash...

Integer Overflow

vim is vulnerable to Integer Overflow. The vulnerability exists in egtilde function at regexp.c due to a segmentation fault which allows an attacker to exhausts memory causing an overflow...

SUSE SLES12 Security Update : mariadb (SUSE-SU-2023:3174-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3174-1 advisory. - CVE-2022-32084: Fixed segmentation fault via the component subselect bsc1201164. Tenable has extracted the preceding description block...

SUSE: Security Advisory (SUSE-SU-2023:3174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:3174-1 Security update for mariadb

This update for mariadb fixes the following issues: - CVE-2022-32084: Fixed segmentation fault via the component subselect bsc1201164...

CVE-2023-33370

An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the main web server of IDSecure to fault and crash, causing a denial of service...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2554)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...