1992 matches found
Design/Logic Flaw
An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, leading to an out-of-bounds read...
CVE-2023-38427
An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemblenegcontexts...
Linux kernel 缓冲区错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An out-of-bounds read vulnerability exists in versions of Linux kernel prior to 6.3.4, which stems from fs/ksmbd/smb2pdu.c not properly checking the UserName value, and can be...
CVE-2023-38427
The connected documents confirm CVE-2023-38427 affects the Linux kernel (ksmbd) via an integer underflow and an out-of-bounds read in fs/smb/server/smb2pdu.c (deassemble_neg_contexts) and that a fix was released in Linux kernel 6.3.8. Practical impact is high due to potential data exposure and co...
CVE-2023-38429
The CVE-2023-38429 issue is reported in the Linux kernel (pre-6.3.4) within ksmbd: fs/ksmbd/connection.c contains an off-by-one error in memory allocation (ksmbd_smb2_check_message), which can cause out-of-bounds access. Connected advisories (Astra Linux, Nessus plugin references) corroborate the...
CVE-2023-35693
CVE-2023-35693 affects the IncFS kernel component (fs/incfs/vfs.c). The issue is a use-after-free that can cause memory corruption, enabling local privilege escalation with system execution privileges required. Exploitation details are not provided in the supplied documents. The bulletins referen...
MAL-2023-568 Malicious code in literal-fs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a6301bbe43b32cb4560eeb8b8cf7525ae5d1e18f851406ee8d72a4dcd0eb494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in literal-fs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a6301bbe43b32cb4560eeb8b8cf7525ae5d1e18f851406ee8d72a4dcd0eb494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Node.js: process.binding() can bypass the permission model through path traversal
The use of the deprecated API process.binding allowed for bypassing the permission model in Node.js 20.x through path traversal...
CVE-2023-30582
A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non- argument...
PT-2025-38350
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.142-1-generic, 5.10.142-1-hardened, 6.1.50-1-generic, and 6.1.90-1-generic Description The Linux kernel contains a flaw in the net/mlx5e module, specifically within the mlx5e fs tt redirect any create...
SUSE CVE-2023-30582
A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non- argument. This flaw arises from an inadequate permission model that fails to restrict file watching through the fs.watchFile API. As a...
PT-2023-4525 · Node.Js · Node.Js
Name of the Vulnerable Software and Affected Versions: Node.js version 20 Description: The issue is related to the fs.openAsBlob method in Node.js, which can bypass the experimental permission model when using the file system read restriction with the --allow-fs-read flag. This flaw arises from a...
EulerOS Virtualization 2.11.1 : qemu (EulerOS-SA-2023-2082)
According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Bloc...
EulerOS Virtualization 2.11.0 : qemu (EulerOS-SA-2023-2134)
According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Bloc...
CVE-2023-34256
An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4groupdesccsum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend again...
CVE-2023-30350
CVE-2023-30350 affects FS S3900-24T4S switches. The issue is inadequate access control that lets an authenticated user with guest privileges escalate to admin and reset the admin password. Evidence shows exploitation in practice (e.g., exploit/test material via Packet Storm and Exploit-DB) demons...
CVE-2023-30350
FS S3900-24T4S devices allow authenticated attackers with guest access to escalate their privileges and reset the admin password...
