OSV-2023-811 Invalid-free in bit_chain_alloc_size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62132 Crash type: Invalid-free Crash state: bitchainallocsize bitwriteRC bitHtodat...

PT-2023-36001 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Invalid-free. The crash state involves several functions: bit chain alloc size, bit write RC, and bit ...

No zero address check on constructor parameters in contracts

Lines of code Vulnerability details Impact Detailed description of the impact of this finding There is no address0 check in the constructor of the following contracts; 1. Sourcesbridge.sol 2. rSUDY.sol 3. Destination ridge.sol 4. rSUDYFactory.sol Lack of addr0 check can lead to loss of important...

Oracle Linux 7 : qemu (ELSA-2021-9638)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9638 advisory. - ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packe...

Oracle Linux 7 : GStreamer (ELSA-2017-2060)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2060 advisory. clutter-gst2 2.0.18-1 - Update to 2.0.18 - Remove obsolete patches - Use license macro for COPYING - Resolves: 1386833 gnome-video-effects 0.4.3-1 -...

Potential Out-of-Bounds Error When Modifying Ranges

Lines of code Vulnerability details The method allows for the modification of a range based on an index. However, there's no explicit check to ensure that the provided indexToModify is within the bounds of the ranges array. If an out-of-bounds index is provided, the method will throw a generic...

Oracle Linux 7 : mod_auth_openidc (ELSA-2019-2112)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-2112 advisory. - Resolves: rhbz1626297 - CVE-2017-6413 modauthopenidc: OIDCCLAIM and OIDCAuthNHeader not skipped in an 'AuthType oauth20' configuration rhel-7 Tenable...

Oracle Linux 8 : kernel (ELSA-2020-4431)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4431 advisory. - fs xfs: fix boundary test in xfsattrshortformverify Eric Sandeen 1875316 CVE-2020-14385 - net packet: fix overflow in tpacketrcv Hangbin Liu 1876224...

.The _newPosPrev/_newPosNext hints do not fully prevent invalid ordering when decreasing a delegate's stake.

Lines of code Vulnerability details Impact The contract could incorrectly deactivate or reward transcoders based on the invalid pool order. Proof of Concept When decreasing a delegate's stake with decreaseTotalStake, the contract calls transcoderPool.updateKey to update the delegate's position in...

Zero Amount Check Missing in reLP function

Lines of code Vulnerability details Impact If amount is 0, the reLP function will still execute all its operations, including external contract calls, which consume gas. This could lead to unnecessary gas costs for the caller. In a worst-case scenario, if this function is called repeatedly with...

CLSA-2023-1693904973 Fix CVE(s): CVE-2022-48174

SECURITY UPDATE: unlikely stack overflow vulnerability - debian/patches/CVE-2022-48174.patch: break if a number string containing invalid characters - CVE-2022-48174...

CVE-2023-33019

Transient DOS in WLAN Host while doing channel switch announcement CSA, when a mobile station receives invalid channel in CSA IE...

CVE-2023-33020

Transient DOS in WLAN Host when an invalid channel like channel out of range is received in STA during CSA IE...

Information disclosure

Transient DOS in Modem while processing invalid System Information Block 1...

Code injection

Transient DOS in WLAN Host when an invalid channel like channel out of range is received in STA during CSA IE...

Code injection

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement CSA...

CVE-2023-33020

CVE-2023-33020 corresponds to a transient denial-of-service in WLAN Hosts when an invalid channel (e.g., channel out of range) is received in STA during a Channel Switch Announcement (CSA) Information Element. The CVE is rated CVSS v3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack...

CVE-2023-33020 Improper Authorization in WLAN Host

Transient DOS in WLAN Host when an invalid channel like channel out of range is received in STA during CSA IE...

PT-2023-18309 · Qualcomm · Qualcomm Ar8035

Name of the Vulnerable Software and Affected Versions: Qualcomm AR8035 affected versions not specified Description: The issue is related to a transient Denial of Service DOS in the modem when processing an invalid System Information Block 1. This can potentially cause disruptions in service. Ther...

CVE-2023-4284

The Post Timeline WordPress plugin before 2.2.6 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...