kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

Unofficial Patch Released for New Actively Exploited Windows MotW Vulnerability

An unofficial patch has been made available for an actively exploited security flaw in Microsoft Windows that makes it possible for files signed with malformed signatures to sneak past Mark-of-the-Web MotW protections. The fix, released by 0patch, arrives weeks after HP Wolf Security disclosed a...

Certain HP ENVY, OfficeJet, DeskJet printers - Potential denial of service

Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack. Update the printer firmware...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

HP PC BIOS October 2022 PCR Measurement Update

A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability. Intel has released updates to mitigate the potential vulnerabilities. HP has identified...

Security Bulletin: IBM Sterling Connect:Direct for HP NonStop vulnerable to denial of service due to OpenSSL (CVE-2022-0778)

Summary IBM Sterling Connect:Direct for HP NonStop is vulnerable to denial of service due to usage of OpenSSL. Issue has been addressed. Vulnerability Details CVEID:CVE-2022-0778 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a flaw in the BNmodsqrt function when parsing...

NVIDIA GPU Display Driver August 2022 Security Update

NVIDIA has informed HP of potential security vulnerabilities identified in the NVIDIA® GPU Display Driver for Windows, which may allow escalation of privilege, code execution, denial of service, and information disclosure. NVIDIA has released updates to mitigate these vulnerabilities. NVIDIA has...

Go Update iOS, Chrome, and HP Computers to Fix Serious Flaws

Plus: WhatsApp plugs holes that could be used for remote execution attacks, Microsoft patches a zero-day vulnerability, and more...

The vulnerability of HP printer microprogramming software relates to the possibility of writing beyond the buffer boundaries into memory, allowing a hacker to execute arbitrary code.

The vulnerability of HP printer microprogramming software relates to the possibility of writing beyond the buffer boundaries into memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

HPESBUX04368 rev.1 - HP-UX Using OpenSSL, Multiple Local and Remote Vulnerabilities

Potential Security Impact: Local: Arbitrary Command Execution, Denial of Service DoS, script injection; Remote: Arbitrary Command Execution, Denial of Service DoS, script injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX OpenSSL Software prior to A.01.01.01p.001 CVSS...

CVE-2022-28722

Certain HP Print Products are potentially vulnerable to Buffer Overflow...

CVE-2022-28721

Certain HP Print Products are potentially vulnerable to Remote Code Execution...

CVE-2022-28721

Certain HP Print Products are potentially vulnerable to Remote Code Execution...

CVE-2022-28722

Certain HP Print Products are potentially vulnerable to Buffer Overflow...

Remote code execution

Certain HP Print Products are potentially vulnerable to Remote Code Execution...

Buffer overflow

Certain HP Print Products are potentially vulnerable to Buffer Overflow...

CVE-2022-28722

Certain HP Print Products are potentially vulnerable to Buffer Overflow...

CVE-2022-28722

Certain HP Print Products are potentially vulnerable to Buffer Overflow...

CVE-2022-28722

CVE-2022-28722 concerns HP Print Products with a Buffer Overflow. The PT-2022-19197 entry notes HP Print Products as affected but provides no details on affected versions or a fix. CVSS metrics indicate a CRITICAL, network-accessible vulnerability (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)....

CVE-2022-28721

CVE-2022-28721 affects HP Print Products with a high-severity vulnerability likely due to a buffer overflow in HP printer firmware, enabling remote code execution without user interaction. The NVD entry lists CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base score 9.8). HP’s security bulletin ...