SUSE CVE-2023-4573

When receiving rendering data over IPC mStream could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox suffers from a Resource Management Error vulnerability that stems from the fact that when creating callbacks via IPC to display a file chooser window, multiple identical callbacks may be created at the same...

UBUNTU-CVE-2023-4573

When receiving rendering data over IPC mStream could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2...

The vulnerability of the SetAll() method in the D-Bus interprocess communication mechanism of Red Hat Enterprise Linux allows a attacker to increase their privileges.

The vulnerability of the SetAll method in the D-Bus interprocess communication mechanism of Red Hat Enterprise Linux operating systems is related to deficiencies in the authorization process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the libxpc library in iOS operating systems, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura allows a hacker to trigger a service failure.

The vulnerability of the libxpc library in iOS, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura systems is related to errors in processing input data. Exploiting this vulnerability allows an attacker to cause service failures...

OESA-2023-1445 elfutils security update

Elfutils is a collection of utilities, including stack to show backtraces, nm for listing symbols from object files, size for listing the section sizes of an object or archive file, strip for discarding symbols, elflint to check for well-formed ELF files and elfcompress to compress or decompress...

The vulnerability of the Mojo browser’s IPC library in Google Chrome allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Mojo library in Google Chrome browsers relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code using a specially created HTML page...

The vulnerability of the semget() function in the ipc/sem.c module of the Linux kernel’s interprocess communication subsystem allows a attacker to cause a service failure.

The vulnerability of the semget function in the ipc/sem.c module of the Linux interprocess communication subsystem is related to the lack of control over the amount of resources allocated. Exploiting this vulnerability could allow a attacker to cause service failures...

kernel: ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot It is not yet clear, but it is possible to create a firmware so broken that it will send a reply message before a FWREADY message it is not yet clear if...

kernel: ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot It is not yet clear, but it is possible to create a firmware so broken that it will send a reply message before a FWREADY message it is not yet clear if...

PT-2023-13305 · Qualcomm · Snapdragon +14

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to memory corruption caused by incorrect type conversion or cast in audio processing. This occurs when a crafted address is sent from AGM IPC to AGM during audi...

USN-5991-1 linux-gcp-4.15 vulnerabilities

It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2021-3669 It was discovered that a use-after-free vulnerability existed in the SGI GRU...

Netgear Orbi Satellite RBS750 ubus backend communications command execution vulnerability

Talos Vulnerability Report TALOS-2022-1597 Netgear Orbi Satellite RBS750 ubus backend communications command execution vulnerability March 21, 2023 CVE Number CVE-2022-36429 SUMMARY A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite...

The vulnerability in the implementation of the TIPC protocol (Transparent Inter-Process Communication) in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the TIPC protocol’s implementation in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability in the implementation of the TIPC protocol (Transparent Inter-Process Communication) in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the TIPC protocol’s implementation in the Linux operating system is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the memory manager in the ipc/util.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the memory manager in the ipc/util.c file of the Linux operating system’s kernel is related to incorrect calculations of the number of IPC identifiers used in the sysvipcfindipc function. Exploiting this vulnerability can allow an attacker to cause a service failure...

USN-5909-1 linux-azure-fde vulnerabilities

It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux kernel did not properly perform bounds checking in some situations. A physically proximate attacker could use this to craft a malicious USB device that when inserted, could cause a denial of service system crash or possibly...

SUSE CVE-2006-2071

Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by using mprotect to give write permission to the attachment. NOTE: some original raw sources combined this issue with CVE-2006-1524, but they are different bug...

SUSE CVE-2010-4073

The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the 1 compatsyssemctl, 2 compatsysmsgctl, and 3 compatsysshmctl functions in...

SUSE CVE-2010-4083

The copysemidtouser function in ipc/sem.c in the Linux kernel before 2.6.36 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via a 1 IPCINFO, 2 SEMINFO, 3 IPCSTAT, or 4 SEMSTAT command in a semctl system call...