Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2022-1901)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

grub2: Integer underflow in grub_net_recv_ip4_packets

A flaw was found in grub2 when handling IPv4 packets. This flaw allows an attacker to craft a malicious packet, triggering an integer underflow in grub code. Consequently, the memory allocation for handling the packet data may be smaller than the size needed. This issue causes an out-of-bands wri...

Tuxera NTFS-3G numeric error vulnerability

Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for supporting read and write NTFS partitions.Tuxera NTFS-3G suffers from a numeric error vulnerability that originates from integer underflow in fuselibreaddir, which can be exploited by attackers to cause...

Tuxera NTFS-3G 数字错误漏洞

Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for supporting read and write NTFS partitions.Tuxera NTFS-3G suffers from a numeric error vulnerability that originates from integer underflow in fuselibreaddir, which can be exploited by attackers to cause...

Mageia: Security Advisory (MGASA-2022-0177)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-3012-1 : libxml2 - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3012 advisory. Felix Wilhelm discovered that libxml2, the GNOME XML library, did not correctly check for integer overflows or used wrong types for buffer sizes. This could result in...

Updated libxml2 packages fix security vulnerability

In libxml2 before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer...

MGASA-2022-0177 Updated libxml2 packages fix security vulnerability

In libxml2 before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer...

CVE-2021-26348

Failure to flush the Translation Lookaside Buffer TLB of the I/O memory management unit IOMMU may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity...

Integer overflow

In libxml2 before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer...

CVE-2022-29824: Integer Overflow or Wraparound

In libxml2 before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer...

libxslt和libxml2 输入验证错误漏洞

libxslt is an XSLT XML Language for Defining XML Transformations C library. libxml2 is an open source library for parsing XML documents. It is written in C and can be called by many languages, such as C, C++, XSH. An input validation error vulnerability exists in libxml2 versions prior to 2.9.14...

CVE-2022-29824

In libxml2 before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer...

Google Android Buffer Overflow Vulnerability (CNVD-2022-16338)

Google Android is a Linux-based open-source operating system from Google, Inc. The Google Android buffer overflow vulnerability stems from improper boundary checking. An attacker could exploit the vulnerability to perform arbitrary memory writes and code execution...

Google Android Input Validation Error Vulnerability (CNVD-2022-16337)

Google Android is a Linux-based open source operating system from Google, Inc. The Google Android input validation error vulnerability stems from incorrect input validation. An attacker could exploit the vulnerability to perform arbitrary memory writes and code execution...

Google Android arbitrary memory write vulnerability

Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to arbitrary memory writes, which can be exploited by attackers to perform arbitrary memory writes and code execution due to incorrect boundary checking in the edenruntime hal service...

Samsung Mobile 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. The Google Android input validation error vulnerability stems from incorrect input validation. An attacker could exploit the vulnerability to perform arbitrary memory writes and code execution...

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. The Google Android buffer overflow vulnerability stems from improper boundary checking. An attacker could exploit the vulnerability to perform arbitrary memory writes and code execution...

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to arbitrary memory writes, which can be exploited by attackers to perform arbitrary memory writes and code execution due to incorrect boundary checking in the edenruntime hal service...

Nvidia GPU Display Driver for Linux 安全漏洞

Nvidia GPU Display Driver for Linux is a driver from Nvidia Corporation that is used for interactive support of graphics card display modules in Linux systems. A security vulnerability exists in Nvidia GPU Display Driver for Linux, which can be exploited by an attacker to cause a denial of servic...