27960 matches found
UBUNTU-CVE-2021-47336
In the Linux kernel, the following vulnerability has been resolved: smackfs: restrict bytes count in smksetcipso Oops, I failed to update subject line. From 07571157c91b98ce1a4aa70967531e64b78e8346 Mon Sep 17 00:00:00 2001 Date: Mon, 12 Apr 2021 22:25:06 +0900 Subject: PATCH smackfs: restrict byt...
UBUNTU-CVE-2021-47353
In the Linux kernel, the following vulnerability has been resolved: udf: Fix NULL pointer dereference in udfsymlink function In function udfsymlink, epos.bh is assigned with the value returned by udftgetblk. The function udftgetblk is defined in udf/misc.c and returns the value of sbgetblk functi...
CVE-2023-52748: Out-of-bounds Write
In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid format-overflow warning With gcc and W=1 option, there's a warning like this: fs/f2fs/compress.c: In function ‘f2fsinitpagearraycache’: fs/f2fs/compress.c:1984:47: error: ‘%u’ directive writing between 1 and 7 bytes...
CVE-2024-35937
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subframe in the A-MSDU but the header isn't fully there, we can end up reading data out of bounds, only to discard later. Make this a bit more...
Mozilla: Arbitrary JavaScript execution in PDF.js
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...
Mozilla: Use-after-free could occur when printing to PDF
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash...
Mozilla: Use-after-free could occur when printing to PDF
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash...
Malware in @ozon-ob-toolbox/format-date
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-1374 Malicious code in @ozon-ob-toolbox/format-date (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99cb774b8b6118ad1c97aca951b1ac6bfc5814a661b3fea62fecd862204f47ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Parasolid 3D Buffer Overflow
The vulnerability of Parasolid’s 3D geometric modeling tool is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by opening a specially crafted XT format file...
KeePass security vulnerability
KeePass is an open source password manager. A security vulnerability exists in KeePassXC version 2.7.7, which stems from a vulnerability that allows an attacker to recover some passwords stored in the .kdbx database...
UBUNTU-CVE-2024-35937
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subframe in the A-MSDU but the header isn't fully there, we can end up reading data out of bounds, only to discard later. Make this a bit more...
CVE-2024-35937 wifi: cfg80211: check A-MSDU format more carefully
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subframe in the A-MSDU but the header isn't fully there, we can end up reading data out of bounds, only to discard later. Make this a bit more...
CVE-2024-35937
CVE-2024-35937 affects the Linux kernel wifi stack: cfg80211 A-MSDU handling can read data out of bounds if a subframe header appears but is not fully present. The vulnerability root cause is insufficient validation of A-MSDU subframes; the fix tightens checks to ensure a subframe header can actu...
GHSA-3C5G-73F7-GRVM Neos Information Disclosure Security Note
Due to reports it has been validated that internal workspaces in Neos are accessible without authentication. Some users assumed this is a planned feature but it is not. A workspace preview should be an additional feature with respective security measures in place. Note that this only allows readi...
OESA-2024-1602 giflib security update
giflib is a library of gif images and provides utilities for processing images. Security Fixes: A memory leak out-of-memory in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service via a gif format file.CVE-2021-40633...
CVE-2024-35845: Use of Externally-Controlled Format String
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwlfwinidebuginfotlv is used as a string, so we must ensure the string is terminated correctly before using it...
Adobe Acrobat Reader Memory Use After Free
The vulnerability of PDF viewing and editing programs like Adobe Acrobat and Acrobat Reader lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
FortiOS command-line interpreter Code Execution
The vulnerability of the FortiOS command-line interpreter, the local management platform FortiSwitchManager, and the FortiProxy proxy server for protecting against Internet attacks is related to the use of uncontrolled format strings in processing binary files. Exploiting this vulnerability allow...
Adobe Acrobat Reader Memory Use After Free
The vulnerability of PDF viewing and editing programs like Adobe Acrobat and Acrobat Reader lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...