PT-2023-6438

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 23.001.20093 and earlier Adobe Acrobat Reader versions 20.005.30441 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Description The issue is related to an Integer Underflow or Wraparound that could result...

CVE-2023-28293: Integer Underflow (Wrap or Wraparound)

Windows Kernel Elevation of Privilege Vulnerability...

Adobe Reader < 20.005.30467 / 23.001.20143 Multiple Vulnerabilities (APSB23-24) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 20.005.30467 or 23.001.20143. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 23.001.20093 and earlier and 20.005.30441 and earlier are affected by an out-of-bounds read...

CVE-2023-28247: Integer Underflow (Wrap or Wraparound)

Windows Network File System Information Disclosure Vulnerability...

CVE-2023-24887: Integer Underflow (Wrap or Wraparound)

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability...

CVE-2023-28272: Integer Underflow (Wrap or Wraparound)

Windows Kernel Elevation of Privilege Vulnerability...

SUSE-SU-2023:1701-1 Security update for grub2

This security update of grub2 fixes the following issues: - CVE-2022-2601: Fixed buffer overflow in grubfontconstructglyph bsc1205178. - CVE-2022-3775: Fixed integer underflow in blitcomb bsc1205182. - Bump upstream SBAT generation to 3 - rebuild the package with the new secure boot key bsc120918...

virt:kvm_utils2 security update

qemu-kvm 6.1.1-5-el8 - hw/pvrdma: Protect against buggy or malicious guest driver Yuval Shaia Orabug: 35064352 CVE-2022-1050 - hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion Philippe Mathieu-Daude Orabug: 35060182 - hw/display/qxl: Avoid buffer overrun in qxlphys2virt...

CVE-2023-24911: Integer Underflow (Wrap or Wraparound)

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability...

CVE-2023-24864: Integer Underflow (Wrap or Wraparound)

Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability...

CVE-2023-21708: Integer Underflow (Wrap or Wraparound)

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

K000132893: GRUB2 vulnerability CVE-2022-28733

Security Advisory Description Integer underflow in grubnetrecvip4packets; A malicious crafted IP packet can lead to an integer underflow in grubnetrecvip4packets function on rsm-totallen value. Under certain circumstances the totallen value may end up wrapping around to a small integer number whi...

SUSE-SU-2023:0671-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2022-4144: Fixed qxlphys2virt unsafe address translation that can lead to out-of-bounds read bsc1205808. - CVE-2022-3165: Fixed integer underflow in vncclientcuttextext bsc1203788. - CVE-2022-1050: Fixed use-after-free issue in pvrdmaexeccmd...

Debian: Security Advisory (DSA-1969-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1274-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Open vSwitch vulnerabilities (USN-5890-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5890-1 advisory. Qian Chen discovered that Open vSwitch incorrectly handled certain Organization Specific TLVs. A remote attacker could use this...

Microsoft Windows Media Player Color Conversion Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows Media Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

K15401: OpenSSL vulnerability CVE-2012-2333

Security Advisory Description Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via a...

K32582354: Multiple dnsmasq vulnerabilities

Security Advisory Description CVE-2017-14491 Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted DNS response. CVE-2017-14492 Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers ...

K52950150: CUPS vulnerability CVE-2014-9679

Security Advisory Description Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified impact via a malformed compressed raster file, which triggers a buffer overflow. CVE-2014-9679 Impact There is no impact; F5...