SUSE-SU-2023:2064-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 102.10.1 MFSA 2023-15 bsc1210212: Security fixes: CVE-2023-29531: Out-of-bound memory access in WebGL on macOS bmo1794292 CVE-2023-29532: Mozilla Maintenance Service Write-lock bypass bmo1806394...

Fedora 36 : chromium (2023-fa739b5753)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-fa739b5753 advisory. update to 112.0.5615.165. Fixes the following security issues: CVE-2023-2004 CVE-2023-2133 CVE-2023-2134 CVE-2023-2135 CVE-2023-2136 CVE-2023-2137...

A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.

...

openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0093-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0093-1 advisory. - Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit hea...

OPENSUSE-SU-2023:0093-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 112.0.5615.165 boo1210618: CVE-2023-2133: Out of bounds memory access in Service Worker API CVE-2023-2134: Out of bounds memory access in Service Worker API CVE-2023-2135: Use after free in DevTools CVE-2023-2136: Integer overflow in...

Fedora 37 : mingw-binutils (2023-b667dbdb59)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b667dbdb59 advisory. Backport fix for CVE-2023-1972. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 38 : insight (2023-8a6a30c142)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8a6a30c142 advisory. Disable stringop-overflow warnings. Patch bfd-CVE-2023-1972 fixes a security issue in bfd library. Tenable has extracted the preceding description...

PT-2023-35794 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2023:0093-1 Rating: important References: 1210618 Cross-References: CVE-2023-2133 CVE-2023-2134 CVE-2023-2135 CVE-2023-2136 CVE-2023-2137 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes 5...

Fedora 37 : insight (2023-b4d1469b54)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-b4d1469b54 advisory. Disable stringop-overflow warnings. Patch bfd-CVE-2023-1972 fixes a security issue in bfd library. Tenable has extracted the preceding description...

Google Chrome Code Execution Vulnerability (CNVD-2023-67083)

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome prior to version 112.0.5615.137, which stems from an out-of-bounds memory access in the Service Worker API. An attacker could exploit this vulnerability to execute arbitrary cod...

OESA-2023-1252 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: An out-of-boundsOOB memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfxkms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker...

CVE-2023-2222

A vulnerability was found in binutils, where SEGV of objdump caused by READ memory access at concatfilename at dwarf2.c...

Fedora 37 : chromium (2023-8cc9731416)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8cc9731416 advisory. update to 112.0.5615.121. Fixes the following security issues: CVE-2023-2004 CVE-2023-2133 CVE-2023-2134 CVE-2023-2135 CVE-2023-2136 CVE-2023-2137...

Fedora 36 : chromium (2023-c1741c9724)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c1741c9724 advisory. update to 112.0.5615.121. Fixes the following security issues: CVE-2023-2004 CVE-2023-2133 CVE-2023-2134 CVE-2023-2135 CVE-2023-2136 CVE-2023-2137...

Denial Of Services (DoS)

Google Chrome is vulnerable to Denial Of Services DoS. The vulnerability exists due to the out of bounds memory access in WebHID, which allows an attacker to potentially exploit heap corruption via a malicious HID device...

Chromium: CVE-2023-2133 Out of bounds memory access in Service Worker API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-2134 Out of bounds memory access in Service Worker API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2023-2176

A vulnerability was found in comparenetdevandip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege...

openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0092-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0092-1 advisory. - Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to...