SUSE-SU-2023:2782-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-35828: Fixed a use-after-free flaw inside renesasusb3remove in drivers/usb/gadget/udc/renesasusb3.c bsc1212513. - CVE-2023-35823: Fixed a...

CVE-2023-21633 Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux

Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request...

Advisory ROSA-SA-2023-2174

software: redis 7.0.11 OS: ROSA-CHROME packageevrstring: redis-7.0.11-1.src.rpm CVE-ID: CVE-2022-35977 BDU-ID: 2023-00695 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Redis database management system DBMS is related to integer overflow during object processing. Exploitation of the...

The vulnerability of the VMware ESXi hypervisor, related to writing beyond the buffer boundaries in memory, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the VMware ESXi hypervisor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Freeimage graphic library, related to reading data beyond the buffer in memory, allows attackers to cause a service failure.

The vulnerability of the Freeimage graphic library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created JXR file...

The vulnerability of the DecodeTreeBlock function in the XML data compression tool Xmill allows a hacker to execute arbitrary code.

The vulnerability of the DecodeTreeBlock function in the XML data compression tool Xmill is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2023-32270: Improper Restriction of Operations within the Bounds of a Memory Buffer

Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution...

The vulnerability of the Bluetooth technology implementation in Android devices based on MediaTek MT8167, MT8175, and MT8183 chips allows attackers to gain increased privileges.

The vulnerability of the Bluetooth technology implementation in Android devices based on MediaTek MT8167, MT8175, and MT8183 operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2023-28601

Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability. A malicious user may alter protected Zoom Client memory buffer potentially causing integrity issues within the Zoom Client...

Design/Logic Flaw

Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability. A malicious user may alter protected Zoom Client memory buffer potentially causing integrity issues within the Zoom Client...

CVE-2023-28601

CVE-2023-28601 affects Zoom Client for Windows prior to version 5.14.0. The vulnerability is described as an improper restriction of operations within the bounds of a memory buffer, potentially allowing memory buffer tampering that could cause integrity issues in the Zoom Client. Affected compone...

CVE-2023-28601

Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability. A malicious user may alter protected Zoom Client memory buffer potentially causing integrity issues within the Zoom Client...

PT-2023-3755 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 5.14.0 Description: The issue is related to an improper restriction of operations within the bounds of a memory buffer, which can be exploited by a remote attacker to execute arbitrary code. This can potentially cause...

Siemens Teamcenter Visualization and JT2Go

​​As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services ...

CVE-2023-28601: Improperly Implemented Security Check for Standard

Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability. A malicious user may alter protected Zoom Client memory buffer potentially causing integrity issues within the Zoom Client...

Zoom Client 缓冲区错误漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom for Windows clients prior to version 5.14.0, which stems from an incorrect operation limit in the memory buffer...

Zoom Client for Meetings < 5.14.0 Vulnerability (ZSB-23009)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23009 advisory. - Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory...

CVE-2023-34341: Improper Restriction of Operations within the Bounds of a Memory Buffer

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure, or data tampering...

The vulnerability in the ext4_group_desc_csum() function of the Linux operating system’s file system driver allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Linux operating system’s ext4 file system driver relates to the use of a dedicated buffer for memory management outside the scope in the function ext4groupdesccsum within the fs/ext4/super.c module. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of Cisco SD-WAN vEdge router microprogramming software, related to the execution of operations outside the buffer in memory, allows a attacker to cause service failure.

The vulnerability of Cisco SD-WAN vEdge microprogramming software relates to the execution of operations outside the buffer in memory when handling traffic. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...