CVE-2022-0324

There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp...

CVE-2022-0324

There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp...

Out-of-bounds

There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp...

CVE-2022-0324

CVE-2022-0324 describes a buffer overflow in the DHCPv6 packet parsing code within dhcp6relay. The connected documents specify that a remote attacker could craft a DHCPv6 packet to trigger an out-of-bounds memcpy write, causing dhcp6relay to crash and potentially shutdown the related DHCP relay d...

PT-2022-34872 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.7 Description: The issue is related to a missing memcpy in kasan init, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

EulerOS 2.0 SP9 : uboot-tools (EulerOS-SA-2022-2780)

According to the versions of the uboot-tools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - nfslookupreply in net/nfs.c in Das U-Boot through 2022.04 and through 2022.07-rc2 has an unbounded memcpy with a failed length check, leadin...

sonic-buildimage 安全漏洞

sonic-buildimage is an open source library for SONiC. Scripts to execute installable binary image builds for SONiC A security vulnerability exists in sonic-buildimage, which stems from a vulnerability in the DHCPv6 packet parsing code, which can be exploited by an attacker to craft a packet that...

libtiff: Denial of Service via crafted TIFF file

A flaw was found in libtiff where a NULL source pointer passed as an argument to the memcpy function within the TIFFFetchStripThing in tifdirread.c. This flaw allows an attacker with a crafted TIFF file to exploit this flaw, causing a crash and leading to a denial of service...

PT-2025-40125

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the drm/vmwgfx module related to cursor handling. Insufficient validation of the copybox size for snooped cursors could lead to memory copy...

Debian dla-3152 : glibc-doc - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3152 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3152-1 [email protected]...

PT-2025-37627

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential receive RX buffer overflow exists in the Intel Advanced SoCs ASoC driver. An event triggering the firmware to return an invalid RX size for LARGE CONFIG GET could lead to...

CVE-2022-36280

An out-of-bounds memory write vulnerability was found in the Linux kernel's vmwgfx driver in vmwkmscursorsnoop due to a missing check of a memcpy length. This flaw allows a local, unprivileged attacker with access to either the /dev/dri/card0 or /dev/dri/rendererD128 and able to issue an ioctl on...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2571)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GSD-2022-1006561 wireguard: netlink: avoid variable-sized memcpy on sockaddr

wireguard: netlink: avoid variable-sized memcpy on sockaddr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.71 by commit...

GSD-2022-1006477 wireguard: netlink: avoid variable-sized memcpy on sockaddr

wireguard: netlink: avoid variable-sized memcpy on sockaddr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...

PT-2022-34777 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: The issue concerns a potential security vulnerability in the Linux Kernel related to the wireguard netlink, specifically involving a variable-sized memcpy on sockaddr. The actual impact and...

PT-2022-34817 · Wireguard +1 · Wireguard +1

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.71 Description: The issue concerns a potential security vulnerability in the netlink component of WireGuard, related to a variable-sized memcpy on sockaddr. The actual impact and attack plausibility have n...

PT-2022-34733

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0 Description The issue concerns a potential security vulnerability in the Linux Kernel related to the wireguard netlink, specifically involving a variable-sized memcpy on sockaddr. The actual impact and attac...

PT-2022-36673 · Git +1 · Sleuthkit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type known as Memcpy-param-overlap. The crash state involves several function calls, including tsk fs load file action, t...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Memcpy-param-overlap in tsk_fs_load_file_action

Detailed Report: https://oss-fuzz.com/testcase?key=5736382060691456 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsntfsfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x000000000000,0xffffffff00000080 and 0x621000003d00,...