PT-2023-4263 · Apple +8 · Macos Ventura +13

Name of the Vulnerable Software and Affected Versions: WebKitGTK and WPE WebKit versions prior to those included in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3, and iPadOS 16.3 Description: The issue is related to a buffer overflow in memory, which may allow a remote attacker to execute...

CVE-2021-33641

When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory use after free...

Debian dla-3274 : gir1.2-javascriptcoregtk-4.0 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3274 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3274-1 [email protected]...

USN-5795-2 net-snmp vulnerabilities

USN-5795-1 and 5543-1 fixed several vulnerabilities in Net-SNMP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Net-SNMP incorrectly handled certain requests. A remote attacker could possibly use these...

USN-5800-1 heimdal vulnerabilities

It was discovered that Heimdal incorrectly handled certain SPNEGO tokens. A remote attacker could possibly use this issue to cause a denial of service. CVE-2021-44758 Evgeny Legerov discovered that Heimdal incorrectly handled memory when performing certain DES decryption operations. A remote...

SUSE-SU-2023:0068-1 Security update for net-snmp

This update for net-snmp fixes the following issues: - CVE-2022-44793: Fixed a NULL pointer dereference issue that could allow a remote attacker with write access to crash the server instance bsc1205148. - CVE-2022-44792: Fixed a NULL pointer dereference issue that could allow a remote attacker...

SUSE: Security Advisory (SUSE-SU-2023:0061-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2023:0061-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0061-1 advisory. Update to version 2.38.3 bnc1206750: - CVE-2022-42852: Fixed disclosure of process memory by improved memory handling. -...

SUSE-SU-2023:0061-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.38.3 bnc1206750: - CVE-2022-42852: Fixed disclosure of process memory by improved memory handling. - CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously crafted web content bsc1206474. -...

CVE-2022-25722

Information exposure in DSP services due to improper handling of freeing memory...

CVE-2022-25722 Information Exposure in DSP Services

Information exposure in DSP services due to improper handling of freeing memory...

CVE-2022-25722 Information Exposure in DSP Services

Information exposure in DSP services due to improper handling of freeing memory...

CVE-2022-25722

CVE-2022-25722 describes information exposure in DSP services due to improper handling of freeing memory. Affected: DSP-related components (Qualcomm/DP S services) as per CVE entry and Android Pixel bulletin referencing this CVE under Qualcomm kernel subcomponent. Root cause: improper memory mana...

PT-2023-12802 · Unknown · Dsp Services

Name of the Vulnerable Software and Affected Versions: DSP services affected versions not specified Description: The issue is related to information exposure in DSP services. This occurs due to improper handling of freeing memory, which can lead to sensitive data being accessible. Recommendations...

webkitgtk: processing maliciously crafted web content may lead to an arbitrary code execution

A vulnerability was found in webkitgtk, where a type confusion issue was addressed with improved memory handling. By this security flaw processing maliciously crafted web content may lead to arbitrary code execution...

USN-5785-1: FreeRADIUS vulnerabilities

It was discovered that FreeRADIUS incorrectly handled multiple EAP-pwd handshakes. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. CVE-2019-17185 Shane Guan discovered that FreeRADIUS incorrectly handled memory when checking unkno...

webkitgtk: processing maliciously crafted web content may lead to an arbitrary code execution

A vulnerability was found in webkitgtk, where a type confusion issue was addressed with improved memory handling. By this security flaw processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-42852

The issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may result in the disclosure of process memory...

USN-5784-1 usbredir vulnerability

It was discovered that usbredir incorrectly handled memory when serializing large amounts of data in the case of a slow or blocked destination. An attacker could possibly use this issue to cause applications using usbredir to crash, resulting in a denial of service, or possibly execute arbitrary...

Debian DSA-5308-1 : webkit2gtk - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5308 advisory. The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-42852 hazbinhotel discovered that processing maliciously crafted web...