11085 matches found
curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3 libcurl can confuse session tickets arriving from the HTTPS proxy but work as if they arrived from the remote server and then wrongly "short-cut" the host handshake. When confusing the tickets a HTTPS proxy can trick libcurl to use the wrong session ticket resume for the host and thereby circumvent the server TLS certificate check and make a MITM attack to be possible to perform unnoticed. Note that such a malicious HTTPS proxy needs to provide a certificate that curl will accept for the MITMed server for an attack to work - unless curl has been told to ignore the server certificate check.
...
Debian: Security Advisory (DLA-1157-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-1230-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-247-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-20642
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628586; Issue ID: ALPS07628586...
CVE-2023-20639
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628587; Issue ID: ALPS07628587...
CVE-2023-20645
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628609; Issue ID: ALPS07628609...
Fortinet FortiOS 缓冲区错误漏洞
Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam. A security vulnerabili...
MediaTek 芯片 输入验证错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the ril module of the MediaTek chips, which is caused by a lack of boundary checking and may allow out-of-bounds reads...
MediaTek 芯片 输入验证错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the ril module of the MediaTek chips, which is caused by a lack of boundary checking and may allow out-of-bounds writes...
MediaTek 芯片 输入验证错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the ril module of the MediaTek chips, which is caused by a lack of boundary checking and may allow out-of-bounds writes...
MediaTek 芯片 输入验证错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the ril module of the MediaTek chips, which is caused by a lack of boundary checking and may allow out-of-bounds reads...
MediaTek 芯片 输入验证错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the ril module of the MediaTek chips, which is caused by a lack of boundary checking and may allow out-of-bounds reads...
MediaTek 芯片 输入验证错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the ril module of the MediaTek chips, which is caused by a lack of boundary checking and may allow out-of-bounds writes...
MediaTek 芯片 输入验证错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the ril module of the MediaTek chips, which is caused by a lack of boundary checking and may allow out-of-bounds writes...
MediaTek 芯片 输入验证错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the ril module of the MediaTek chips, which is caused by a lack of boundary checking and may allow out-of-bounds reads...
The vulnerability in the implementation of the GOT Mobile function in the software for graphic control panels from Mitsubishi Electric’s GOT2000 series, models GT27 and GT25, as well as the HMI platform GT SoftGOT2000, allows a attacker to carry out a “click hijacking” attack.
The vulnerability of the GOT Mobile function implementation in Mitsubishi Electric’s GOT2000 series graphic control panels, models GT27 and GT25, as well as the HMI platform GT SoftGOT2000, is related to an incorrect limitation on the layers or frames that can be displayed in the user interface...
SUSE CVE-2023-26463
strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes within the same function. There is initially incorrect access control, later followed by an expired pointer dereference. One attack vector is sending an untrust...