FFmpeg 缓冲区错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A buffer overflow vulnerability exists in the FFmpeg readvarblockdata function, which can be exploited by an attacker to trigger an out-of-bounds read memory access...

EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2022-1900)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out ...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-1896)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-1900)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0232 Updated chromium-browser-stable packages fix security vulnerability

The chromium-browser-stable package has been updated to the 102.0.5005.115 version, fixing many bugs and 7 CVE. Some of them are listed below: Use after free in WebGPU. CVE-2022-2007 Out of bounds memory access in WebGL. CVE-2022-2008 Out of bounds read in compositing. CVE-2022-2010 Use after fre...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-1869)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-40727

Access of Memory Location After End of Buffer CWE-788...

Buffer overflow

Access of Memory Location After End of Buffer CWE-788...

OPENSUSE-SU-2022:10010-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 102.0.5005.115 boo1200423 CVE-2022-2007: Use after free in WebGPU CVE-2022-2008: Out of bounds memory access in WebGL CVE-2022-2010: Out of bounds read in compositing CVE-2022-2011: Use after free in ANGLE...

OPENSUSE-SU-2022:10009-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 102.0.5005.115 boo1200423 CVE-2022-2007: Use after free in WebGPU CVE-2022-2008: Out of bounds memory access in WebGL CVE-2022-2010: Out of bounds read in compositing CVE-2022-2011: Use after free in ANGLE Chromium 102.0.5001.61...

EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2022-1845)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in libtiff versions from 3.9.0 to 4.3.0...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Jun 2022)

This host is missing an important security update according to Microsoft Edge Chromium-Based update. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

USN-5477-1 ncurses vulnerabilities

Hosein Askari discovered that ncurses was incorrectly performing memory management operations when dealing with long filenames while writing structures into the file system. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2017-16879 Chung-Yi L...

The vulnerability of the asynchronous Moxa NPort 5110 server lies in its ability to write data beyond the allowed range, allowing an attacker to restrict access to certain values in memory.

The vulnerability of the asynchronous Moxa NPort 5110 server lies in its ability to write data beyond the allowed range. Exploiting this vulnerability allows a malicious actor to restrict access to certain values in memory...

Chromium: CVE-2022-2008 Out of bounds memory access in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Istio: Unsafe memory access in metadata exchange.

A flaw was found in Istio. Memory access violation of ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access, resulting in undefined behavior or crashing...

PT-2022-12927 · Unknown · Video Framework

Name of the Vulnerable Software and Affected Versions: Video framework affected versions not specified Description: The video framework has an out-of-bounds memory read/write issue. Successful exploitation of this issue may affect system availability. Recommendations: At the moment, there is no...

Ill-formed headers may lead to unexpected behavior in Istio

Impact Ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. You are at most risk if you have an Istio ingress Gateway exposed to external traffic. Patches 1.12.8, 1.13.5, 1.14.1 Workarounds No. References More...

GHSA-XWX5-5C9G-X68X Ill-formed headers may lead to unexpected behavior in Istio

Impact Ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. You are at most risk if you have an Istio ingress Gateway exposed to external traffic. Patches 1.12.8, 1.13.5, 1.14.1 Workarounds No. References More...

Out-of-bounds Read

Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. Users are most likely at risk if they have an Istio ingress...