Out-of-bounds

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X...

CVE-2022-46344

A vulnerability was found in X.Org. The issue occurs because the handler for the XIChangeProperty request has a length-validation issue, resulting in out-of-bounds memory reads and potential information disclosure. This flaw can lead to local privilege elevation on systems where the X server runs...

CVE-2022-46344

CVE-2022-46344 affects X.Org X11-server (XIChangeProperty). The description in the CVE entry notes an out-of-bounds memory access in the XIChangeProperty handler, enabling potential local privilege elevation on privileged X servers and remote code execution for ssh X forwarding sessions. Connecte...

UBUNTU-CVE-2022-46344

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X...

CVE-2022-46344

A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in out-of-bounds memory reads and potential information disclosure. This issue can lead to local privileges elevation on systems where the X...

CVE-2022-20690

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing...

CVE-2022-20690

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing...

CVE-2022-20690

Cisco ATA 190 Series Analog Telephone Adapter firmware contains multiple vulnerabilities in the Cisco Discovery Protocol (CDP) processing due to missing length validation when handling CDP messages. An unauthenticated, adjacent attacker can send a crafted CDP packet, potentially causing memory co...

CVE-2022-20690

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing...

CVE-2022-20689

Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, adjacent attacker to cause Cisco Discovery Protocol memory corruption on an affected device. These vulnerabilities are due to missing...

CVE-2022-20688

A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause Cisco Discovery Protocol service to restart. This vulnerability is due ...

CVE-2022-20687

Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart. These vulnerabilities a...

Tenda i22 formSetAppFilterRule function buffer overflow vulnerability

Tenda i22 is a wireless access point from Tenda, China. Tenda i22 is vulnerable to a buffer overflow vulnerability, which stems from a lack of length validation of input data in the appData parameter of the formSetAppFilterRule function. An attacker could exploit this vulnerability to cause a...

Tenda i22 formWx3AuthorizeSet function buffer overflow vulnerability

Tenda i22 is a wireless access point from Tenda, China. version 1.0.0.3 4687 of the Tenda i22 is vulnerable to a buffer overflow vulnerability that stems from a lack of length validation of input data in the data parameter of the formWx3AuthorizeSet function. An attacker could exploit this...

Tenda i22 formWifiMacFilterSet function buffer overflow vulnerability

Tenda i22 is a wireless access point from Tenda, China. Tenda i22 is vulnerable to a buffer overflow vulnerability that stems from a lack of length validation of input data in the index parameter of the formWifiMacFilterSet function. An attacker could exploit this vulnerability to cause a denial ...

Tenda i22 formWifiMacFilterGet function buffer overflow vulnerability

Tenda i22 is a wireless access point from Tenda, China. Tenda i22 is vulnerable to a buffer overflow vulnerability, which stems from a lack of length validation of input data in the index parameter of the formWifiMacFilterGet function. An attacker could exploit this vulnerability to cause a denia...

Tenda i22 安全漏洞

Tenda i22 is a wireless access point from Tenda, China. Tenda i22 is vulnerable to a buffer overflow vulnerability, which stems from a lack of length validation of input data in the list parameter of the formwrlSSIDget function. An attacker could exploit this vulnerability to cause a denial of...

OESA-2022-2112 freerdp security update

FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp. Security Fixes: FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are...

CVE-2022-39346 Missing length validation of user displayname in nextcloud server

Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit user display names which could allow a malicious users to overload the backing database and cause a denial of service. It is recommended that the Nextcloud Server is upgraded to...

D-Link DIR-882 websRedirect function buffer overflow vulnerability

D-Link DIR-882 is a wireless router from D-Link, China. D-Link DIR-882 firmware versions 1.10B02 and 1.20B06 contain a buffer overflow vulnerability that stems from the lack of length validation of input data by its websRedirect function, which could be exploited by an attacker to cause a denial ...