139 matches found
Important: kernel-livepatch-6.1.49-70.116
Issue Overview: An integer overflow in kmallocreserve in the Linux kernel may allow a local user to crash the system, or in some cases obtain code execution in kernel space. CVE-2023-42752 An issue was discovered in drivers/net/ethernet/intel/igb/igbmain.c in the IGB driver in the Linux kernel...
kernel: ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()
In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: Fix integer overflow in ghesestatuspoolinit Change numghes from int to unsigned int, preventing an overflow and causing subsequent vmalloc to fail. The overflow happens in ghesestatuspoolinit when calculating len duri...
Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access
...
The vulnerability of the operating system kernels in iPadOS, tvOS, iOS, watchOS, and macOS allows a perpetrator to cause service interruptions or exert other effects.
The vulnerability of the kernel in iPadOS, tvOS, iOS, watchOS, and macOS is caused by an overflow in the stack buffer. Exploiting this vulnerability can allow a malicious actor to cause service failures or other adverse effects...
SUSE CVE-2019-11477
Jonathan Looney discovered that the TCPSKBCBskb-tcpgsosegs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments SACKs. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182,...
OpenHarmony 缓冲区错误漏洞
OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony-v3.1.4 version and earlier versions, which stems from a kernel stack overflow vulnerability in the system when calling...
PT-2023-14279 · Unknown · Openharmony
Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.4 Description: The kernel subsystem within OpenHarmony has a kernel stack overflow issue when the SysTimerGettime function is called. This results in 4 bytes of padding data from the kernel stack being copied...
PT-2023-14613 · Unknown · Openharmony
Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.1.4 Description: The kernel subsystem within OpenHarmony has a kernel stack overflow issue when the SysClockGettime function is called. This results in 4 bytes of padding data from the kernel stack being copied...
DEBIAN-CVE-2022-42265
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where an integer overflow may lead to information disclosure or data tampering...
DEBIAN-CVE-2022-42258
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where an integer overflow may lead to denial of service, data tampering, or information disclosure...
UBUNTU-CVE-2022-42256
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where an integer overflow in index validation may lead to denial of service, information disclosure, or data tampering...
UBUNTU-CVE-2022-47942
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer overflow in setntacldacl, related to use of SMB2QUERYINFOHE after a malformed SMB2SETINFOHE command...
PT-2022-34826 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.7 through v5.15.70 Description: The issue is related to a possible overflow in the amu fie setup function. This function is part of the arm64 topology in the Linux Kernel. The actual impact and attack plausibility hav...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.18)
The version of AOS installed on the remote host is prior to 5.18. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.18 advisory. - When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats A...
PYSEC-2021-612
TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the tf.range kernel, there is a conditional statement of type int64 = condition ? int64 : double. Due to C++ implicit conversion rules, both branches of the condition...
PYSEC-2021-395
TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the tf.range kernel, there is a conditional statement of type int64 = condition ? int64 : double. Due to C++ implicit conversion rules, both branches of the condition...
awesome-windows-exploitation
This is a curated list of Windows exploitation resources and tools. The repository is a collection of articles, tutorials, and tools for Windows exploitation, including stack overflows, heap overflows, and kernel-based Windows overflows. The list includes resources such as articles from Phrack, a...
kernel: heap buffer overflow in the iSCSI subsystem
A flaw was found in the Linux kernel. A heap buffer overflow in the iSCSI subsystem is triggered by setting an iSCSI string attribute to a value larger than one page and then trying to read it. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...
kernel: buffer overflow in mt76_add_fragment function in drivers/net/wireless/mediatek/mt76/dma.c
A memory overflow and data corruption flaw were found in the Mediatek MT76 driver module for WiFi in mt76addfragment in drivers/net/wireless/mediatek/mt76/dma.c. An oversized packet with too many rx fragments causes an overflow and corruption in memory of adjacent pages. A local attacker with a...
CVE-2019-20541
An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. The Wi-Fi kernel drivers have a stack overflow. The Samsung IDs are SVE-2019-14965, SVE-2019-14966, SVE-2019-14968, SVE-2019-14969, SVE-2019-14970, SVE-2019-14980, SVE-2019-14981, SVE-2019-14982, SVE-2019-14983,...