CVE-2024-1305

tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and potentially arbitrary code execution in kernel space...

CVE-2024-1305

tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and potentially arbitrary code execution in kernel space...

CVE-2024-1305

CVE-2024-1305 affects the tap-windows6 driver (versions 9.26 and earlier). The issue is that the driver does not properly validate size data in incoming write operations, allowing an attacker to overflow memory buffers and potentially achieve arbitrary code execution in kernel space. This aligns ...

The vulnerability of the SSL VPN remote access technology of the SonicOS operating system allows a intruder to trigger a service failure.

The vulnerability of the SSL VPN remote access technology for the SonicOS operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

SUSE CVE-2024-38569

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisipcie: Fix out-of-bound access when valid event group The perf tool allows users to create event groups through following cmd 1, but the driver does not check whether the array index is out of bounds when writing...

DEBIAN-CVE-2024-38569

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisipcie: Fix out-of-bound access when valid event group The perf tool allows users to create event groups through following cmd 1, but the driver does not check whether the array index is out of bounds when writing...

CLSA-2024-1718791717 procps-ng: Fix of CVE-2023-4016

CVE-2023-4016: possible overflow in multiplication when allocating memory in ps/parser.c...

CLSA-2024-1718791224 java-1.8.0-openjdk: Fix of 4 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u412-b08. That fixes following CVEs: - CVE-2024-21011: Long Exception message leading to crash - CVE-2024-21085: Pack200 excessive memory allocation - CVE-2024-21068: Integer overflow in C1 compiler address generation - CVE-2024-21094: C2...

Security Bulletin: Vulnerabilities in Golang Go and RabbitMQ Java Client might affect IBM Storage Copy Data Management

Summary IBM Storage Copy Data Management can be affected by vulnerabilities in Golang Go and RabbitMQ Java Client. Vulnerabilities include cause a denial of service condition and cause a memory overflow on the system as described by the CVE in the "Vulnerability Details" section. CVE-2023-45288,...

CLSA-2024-1718202251 procps-ng: Fix of CVE-2023-4016

CVE-2023-4016: possible overflow in multiplication when allocating memory in ps/parser.c...

Important: postgresql

Issue Overview: While modifying certain SQL array values, missing overflow checks let authenticated database users write arbitrary bytes to a memory area that facilitates arbitrary code execution. Missing overflow checks also let authenticated database users read a wide area of server memory. The...

Important: postgresql

Issue Overview: While modifying certain SQL array values, missing overflow checks let authenticated database users write arbitrary bytes to a memory area that facilitates arbitrary code execution. Missing overflow checks also let authenticated database users read a wide area of server memory. The...

SUSE CVE-2023-0030

A use-after-free flaw was found in the Linux kernel's nouveau driver in how a user triggers a memory overflow that causes the nvkmvmatail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system...

The vulnerability of the get_syms() function in the bpf component of the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the getsyms function tools/testing/selftests/bpf/progtests/kprobemultitest.c in the Linux kernel’s BPF component is related to a memory overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

The vulnerability of the aa_unpack() function in the AppArmor security module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the aaunpack function in the security/apparmor/policyunpack.c file of the AppArmor security module in the Linux operating system is related to a potential memory overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the unpack_trans_table() function in the AppArmor security module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the unpacktranstable function in the security/apparmor/policyunpack.c file of the AppArmor security module in the Linux operating system is related to a potential memory overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2024-3973

Name of the Vulnerable Software and Affected Versions NGINX Plus affected versions not specified NGINX OSS affected versions not specified Description The issue is related to the HTTP/3 QUIC module in NGINX Plus and NGINX OSS. It involves undisclosed HTTP/3 encoder instructions that can cause NGI...

CVE-2022-48681

Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail...

CVE-2022-48681

Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail...

CVE-2022-48681

Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail...