Medium: gstreamer-plugins-good

Issue Overview: GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files. CVE-2021-3497 Affected Packages: gstreamer-plugins-good Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 112 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 112.0.5615.49 Linux and Mac, 112.0.5615.49/50 Windows contains a number of fixes and improvements -- a list of changes is...

SUSE: Security Advisory (SUSE-SU-2023:0767-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome DOM Bindings, which stems from an out-of-bounds memory access issue...

PT-2023-35751 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This error is identified in the aiScene destructor,...

Google Chrome < 112.0.5615.49 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 112.0.5615.49. It is, therefore, affected by multiple vulnerabilities as referenced in the 202304stable-channel-update-for-desktop advisory. - Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.4...

Google Chrome < 112.0.5615.49 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 112.0.5615.49. It is, therefore, affected by multiple vulnerabilities as referenced in the 202304stable-channel-update-for-desktop advisory. - Heap buffer overflow in Browser History in Google Chrome prior to...

Versionize is lacking bound checks potentially leading to out of bounds memory access

...

Ubuntu 18.04 LTS : Linux kernel (GCP) vulnerabilities (USN-5991-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5991-1 advisory. It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use...

SUSE-SU-2023:1710-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. - CVE-2022-3523: Fixed a use after free related to device private page handling bsc1204363. - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver bsc1203332. -...

CVE-2021-33641

A use-after-free flaw was found in the byacc package. When processing a specially crafted file, malloc incorrectly accesses the released memory...

Microsoft Edge (Chromium) < 111.0.1661.54 / 110.0.1587.78 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 111.0.1661.54 / 110.0.1587.78. It is, therefore, affected by multiple vulnerabilities as referenced in the March 24, 2023 advisory. - Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remot...

SUSE CVE-2023-25668

TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the control of user, leading to a crash or remote code execution. The fix will be included in TensorFlow version 2.12.0 and will also cherrypick...

DEBIAN-CVE-2023-1637

A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to...

UBUNTU-CVE-2023-1637

A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to...

CLSA-2023-1679925211 Fix CVE(s): CVE-2023-1170

SECURITY UPDATE: Accessing invalid memory with put in Visual block mode - debian/patches/CVE-2023-1170: Adjust the cursor column if needed - CVE-2023-1170...

PT-2023-2075 · Cppcheck · Cppcheck

Name of the Vulnerable Software and Affected Versions: Cppcheck affected versions not specified Description: The issue is related to the findGarbageCode function in the Cppcheck static analyzer, which is vulnerable to a memory access out of bounds when concatenating strings using std::operator+...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of an Execution Behavior Attack problem, which could be exploited by an attacker to potentially...

CVE-2023-1637

A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5976-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5976-1 advisory. It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state i...