UBUNTU-CVE-2020-22218

An issue was discovered in function libssh2packetadd in libssh2 1.10.0 allows attackers to access out of bounds memory...

Design/Logic Flaw

There is a use-after-free vulnerability in file pddsimplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution...

Denial of service

An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service...

CVE-2020-19725

There is a use-after-free vulnerability in file pddsimplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution...

CVE-2020-22218

An issue was discovered in function libssh2packetadd in libssh2 1.10.0 allows attackers to access out of bounds memory...

Design/Logic Flaw

An issue was discovered in function libssh2packetadd in libssh2 1.10.0 allows attackers to access out of bounds memory...

SUSE-SU-2023:3376-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ bsc1213287. - CVE-2023-3268: Fixed an out of bounds memory access flaw in...

kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation

A use-after-free vulnerability was found in the Netfilter subsystem of the Linux kernel when processing batch requests to update nftables configuration. This vulnerability can be abused to perform arbitrary reads and writes in kernel memory. A local user with CAPNETADMIN capability could use this...

libssh2 缓冲区错误漏洞

libssh2 is a client-side C library that implements the SSH2 protocol, which is capable of executing remote commands, file transfers, as well as providing a secure transmission channel for remote programs. A security vulnerability exists in libssh 2 version 1.10.0, which stems from a security flaw...

CVE-2020-22218

An issue was discovered in function libssh2packetadd in libssh2 1.10.0 allows attackers to access out of bounds memory...

CVE-2020-22218

The CVE-2020-22218 issue affects libssh2 up to version 1.10.0, related to the function _libssh2_packet_add, which could allow attackers to access out-of-bounds memory. Multiple vendors issued advisories and patches: Debian LTS DLA-3559-1 notes a fix in libssh2 1.8.0-2.1+deb10u1; Cloud/Linux distr...

GNU Binutils 安全漏洞

GNU Binutils is a set of open source tools for working with binaries such as target files, executables, libraries, etc., mainly used in the areas of compilation, debugging, reverse engineering and so on. A denial of service vulnerability exists in GNU Binutils. An attacker can exploit this...

PT-2023-4503 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.110 Description: The issue is related to an out of bounds memory access in the CSS component of Google Chrome, allowing a remote attacker to perform an out of bounds memory read via a crafted HTML...

CVE-2020-19725

CVE-2020-19725 affects Z3 up to version 4.8.8, rooted in a use-after-free in pdd_simplifier.cpp during constraint simplification. This can cause segmentation faults or arbitrary code execution. Mitigation: upgrade to Z3 4.8.8+ (recommended fixes vary by distro; some advisories cite 4.9.1+). Explo...

CVE-2020-19725

There is a use-after-free vulnerability in file pddsimplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution...

PT-2023-4504 · Google +2 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.110 Description: The issue is related to an out of bounds memory access in V8, allowing a remote attacker to perform an out of bounds memory read via a crafted HTML page. This can potentially impact...

PT-2023-4494 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.110 Description: The issue is related to an out of bounds memory access in the Fonts component of Google Chrome, which can be exploited by a remote attacker. This can allow the attacker to perform an...

CVE-2020-19725

There is a use-after-free vulnerability in file pddsimplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution...

Stable Channel Update for Desktop

The Stable and Extended stable channels has been updated to 116.0.5845.110 for Mac and Linux and 116.0.5845.110/.111 for Windows, which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details an...

Chromium: CVE-2023-4355 Out of bounds memory access in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...