xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

postgresql: Buffer overrun from integer overflow in array modification

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing...

SUSE: Security Advisory (SUSE-SU-2023:4912-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-24590

A format string issue in the Controller 6000's optional diagnostic web interface can be used to write/read from memory, and in some instances crash the Controller 6000 leading to a Denial of Service. This issue affects: Gallagher Controller 6000 8.60 prior to vCR8.60.231116a distributed in...

Gallagher Controller 6000 Formatting String Error Vulnerability

The Gallagher Controller 6000 is an interface between the Gallagher Command Center server and distributed field hardware from Gallagher New Zealand. A format string error vulnerability exists in Gallagher Controller 6000 prior to vCR8.60.231116a, 8.50 and prior versions, which stems from the fact...

CVE-2023-4020

Summary: CVE-2023-4020 involves Silicon Labs TrustZone where an unvalidated input in a memory-communication library function allows reading/writing secure memory from non-secure memory. The issue is confirmed across multiple sources (NVD, Red Hat) describing an input-validation flaw in the TrustZ...

CVE-2023-4020 Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory

An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory...

PT-2023-27319 · Silicon · Silicon Labs Trustzone

Name of the Vulnerable Software and Affected Versions: Silicon Labs TrustZone implementation affected versions not specified Description: The issue is related to an unvalidated input in a library function that handles communication between secure and non-secure memory in the Silicon Labs TrustZon...

Fedora 39 : kernel (2023-4df366ee80)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-4df366ee80 advisory. The 6.6.6 stable kernel update reverts the problematic cfg80211 patch that was brought into the 6.6.5 kernel ---- The 6.6.5 stable kernel update contains a...

Fedora 38 : kernel (2023-a8afe852a3)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-a8afe852a3 advisory. The 6.6.6 stable kernel update reverts the problematic cfg80211 patch that was brought into the 6.6.5 kernel ---- The 6.6.5 stable kernel update contains a...

Oracle Linux 7 : postgresql (ELSA-2023-7783)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7783 advisory. 9.2.24-9 - Backport fix for CVE-2023-5869 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...

PT-2023-31573 · Cjson +3 · Cjson +3

Name of the Vulnerable Software and Affected Versions: cJSON version 1.7.16 Description: The issue is related to a segmentation violation in the function cJSON SetValuestring at cJSON.c. This indicates a potential problem with memory access that could lead to a crash or other unintended behavior...

postgresql: Buffer overrun from integer overflow in array modification

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing...

CVE-2023-6377

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

xorg-server -- Multiple vulnerabilities

The X.Org project reports: CVE-2023-6377/ZDI-CAN-22412/ZDI-CAN-22413: X.Org server: Out-of-bounds memory write in XKB button actions A device has XKB button actions for each button on the device. When a logical device switch happens e.g. moving from a touchpad to a mouse, the server re-calculates...

Linux kernel io_uring SQ/CQ function denial of service vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a denial of service vulnerability that originates from an out-of-bounds memory access found in the iouring SQ/CQ function, which can be exploited by a...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2023-3298)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2023-3241)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the smb2_dump_detail() function in Linux operating systems allows a hacker to disclose sensitive information or cause service interruptions.

The vulnerability of the smb2dumpdetail function in Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

SUSE: Security Advisory (SUSE-SU-2023:4715-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...