iperf3: memory allocation hazard and crash

An integer overflow flaw was found in the way iperf3 dynamically allocates memory buffers for JSON-formatted messages. A remote attacker could send a specially crafted sequence of bytes on the iperf3 control channel with a specified JSON message length of 0xffffffff to trigger an integer overflow...

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation, related to the execution of operations beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation lies in the execution of operations beyond the buffer boundaries in memory when processing SPP files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the formSetDeviceName function in the microprogramming software for Tenda FH1203 allows a hacker to trigger a service failure.

The vulnerability of the formSetDeviceName function in the microprogramming software for Tenda FH1203 relates to the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

EulerOS Virtualization 3.0.6.6 : dhcp (EulerOS-SA-2023-2409)

According to the versions of the dhcp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In ISC DHCP 4.4.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addoption, i...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-2412)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-4056 · Apple · Ios +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.6 iPadOS versions prior to 16.6 macOS Ventura versions prior to 13.5 watchOS versions prior to 9.6 Description: The issue is related to a buffer overflow in memory operations, which may allow an app to execute arbitra...

PT-2023-4066 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.6 iPadOS versions prior to 16.6 macOS Ventura versions prior to 13.5 Description: The issue is related to a buffer overflow in memory, which may allow an attacker to execute arbitrary code with elevated privileges. A...

PT-2023-4119 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.6.8 macOS versions prior to 11.7.9 macOS versions prior to 13.5 iOS versions prior to 15.7.8 iOS versions prior to 16.6 iPadOS versions prior to 15.7.8 iPadOS versions prior to 16.6 tvOS versions prior to 16.6 watch...

The vulnerability of the CmpAppForce component in CODESYS and Schneider Electric software products allows a hacker to execute arbitrary code.

The vulnerability of the CmpAppForce component in CODESYS and Schneider Electric software products relates to the ability to write data beyond the buffer boundaries into memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Important: json-c

Issue Overview: A flaw was found in json-c. In printbufmemappend, certain crafted values can overflow the memory allowing an attacker to write past the memory boundary. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. CVE-2020-127...

PT-2023-3537 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to a memory buffer overflow in Microsoft Office, which can allow an attacker to execute arbitrary code. There is no information about the estimated number of...

The vulnerability of the /userfs/bin/tcapi file of the Diagnostics microprogramming system for the D-Link DSL-3782 router allows a hacker to execute arbitrary code.

The vulnerability of the /userfs/bin/tcapi file of the Diagnostics microprogramming system for the D-Link DSL-3782 router lies in the fact that the output of the operation goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Medium: libfastjson

Issue Overview: A flaw was found in json-c. In printbufmemappend, certain crafted values can overflow the memory allowing an attacker to write past the memory boundary. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. CVE-2020-127...

Medium: libfastjson

Issue Overview: A flaw was found in json-c. In printbufmemappend, certain crafted values can overflow the memory allowing an attacker to write past the memory boundary. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. CVE-2020-127...

Important: squid

Issue Overview: An issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM authentication credentials parser in extlmgroupacl may write to memory outside the credentials buffer. On systems with memory access protections, this can result in the helper process being...

AlmaLinux 8 : dhcp (ALSA-2023:3000)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:3000 advisory. - In ISC DHCP 4.4.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addoption, it increases the...

zeek -- potential DoS vulnerabilities

Tim Wojtulewicz of Corelight reports: A specially-crafted series of FTP packets with a CMD command with a large path followed by a very large number of replies could cause Zeek to spend a long time processing the data. A specially-crafted with a truncated header can cause Zeek to overflow memory...

Oracle Linux 9 : dhcp (ELSA-2023-2502)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2502 advisory. - Fix for CVE-2022-2928 - Fix for CVE-2022-2929 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

AlmaLinux 9 : dhcp (ALSA-2023:2502)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2502 advisory. - In ISC DHCP 4.4.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addoption, it increases the...

PT-2023-19924 · Workerd · Workerd

Name of the Vulnerable Software and Affected Versions: workerd versions prior to v1.20230419.0 Description: The FormData API implementation in workerd was subject to an integer overflow. If a FormData instance contained more than 2^31 elements, the forEach method could end up reading from the wro...