Denial Of Service (DoS)

zziplib is vulnerable to Denial Of Service. The vulnerability is due to zzipdiskentrytofileheader function in mmapped.c caused by an invalid memory access which will leads to a denial-of-service...

Siemens SIMATIC 多款产品访问控制错误漏洞

The SIMATIC CP 1623, CP 1626 and CP 1628 are PCI express cards for connection to industrial Ethernet. the SIMATIC CP 1604 and CP 1616 are PCI/PCI-104 cards for the connection of field devices to PROFINET industrial Ethernet. The Siemens SIMATIC CP devices suffer from an Improper Access Control...

Siemens SIMATIC 多款产品资源管理错误漏洞

The SIMATIC CP 1623, CP 1626 and CP 1628 are PCI express cards for connection to industrial Ethernet. the SIMATIC CP 1604 and CP 1616 are PCI/PCI-104 cards for the connection of field devices to PROFINET industrial Ethernet. The Siemens SIMATIC CP devices are vulnerable to an uncontrolled resourc...

PT-2023-6260 · Siemens · Simatic Cp 1623 +4

Name of the Vulnerable Software and Affected Versions: SIMATIC CP 1604 All versions SIMATIC CP 1616 All versions SIMATIC CP 1623 All versions SIMATIC CP 1626 All versions SIMATIC CP 1628 All versions Description: A vulnerability has been identified that exposes kernel memory of affected devices t...

Oracle Linux 8 : glibc (ELSA-2023-5455)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-5455 advisory. - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode. - CVE-2023-4813: potential use-after-free in gaihinet RHEL-2435. Tenable has...

SmmBackdoorNg

SMM Backdoor Next Gen General informationgeneral-informat...

Rocky Linux 8 : glibc (RLSA-2023:5455)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:5455 advisory. - A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode via...

PT-2023-36057 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

The vulnerability of the Neural Engine component in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS allows attackers to execute arbitrary code.

The vulnerability of the Neural Engine component in iPadOS, tvOS, iOS, watchOS, and macOS arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2023-4211

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory...

SUSE-SU-2023:3963-1 Security update for libX11

This update for libX11 fixes the following issues: - CVE-2023-43786: Fixed stack exhaustion from infinite recursion in PutSubImage bsc1215684. - CVE-2023-43787: Fixed integer overflow in XCreateImage leading to a heap overflow bsc1215685. - CVE-2023-43785: Fixed out-of-bounds memory access in...

[slackware-security] libX11

New libX11 packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libX11-1.8.7-i586-1slack15.0.txz: Upgraded. This update fixes security issues: libX11: out-of-bounds memory access ...

CVE-2023-34970

A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...

Race condition

A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...

Race condition

A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory...

CVE-2023-34970

CVE-2023-34970 affects Arm Mali GPU Kernel Driver. A local, non-privileged user can perform improper GPU memory processing to access memory outside buffers or trigger a race condition to reach freed memory. Affected versions are Mali GPU Kernel Driver prior to r44p1 or r45p0 on Valhall or 5th Gen...

CVE-2023-33200

CVE-2023-33200 concerns the ARM Mali GPU Kernel Driver. The Mali driver family (Midgard, Bifrost, Valhall and 5th Gen) is affected by an improper memory processing operation that can be exploited by a local, non-privileged user to access memory that has been freed due to a race condition. The vul...

Updated chromium-browser-stable package fixes bugs and vulnerabilities

The chromium-browser-stable package has been updated to the 117.0.5938.92 release, fixing bugs and 31 vulnerabilities, together with 117.0.5938.92, 117.0.5938.88, 117.0.5938.62, 116.0.5845.187 and 116.0.5845.179. Google is aware that an exploit for CVE-2023-5217 exists in the wild. High...

ARM Mali GPU Kernel Driver r44p0 Improper Memory Access (CVE-2023-34970)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r44p1 or r45p0 running on Valhall or 5th Gen architecture. It is, therefore affected by a improper memory access vulnerability. A local non-privileged user can make improper GPU processing operations to access a...

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory...