501 matches found
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory management issues after memory is freed, allowing attackers to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execut...
SUSE-SU-2023:2989-1 Security update for conmon
This update for conmon fixes the following issues: conmon was updated to version 2.1.7: - Bumped go version to 1.19 bsc1209307. Bugfixes: - Fixed leaking symbolic links in the optsocketpath directory. - Fixed cgroup oom issues bsc1208737. - Fixed OOM watcher for cgroupv2 oomkill events...
SUSE-SU-2023:2988-1 Security update for conmon
This update for conmon fixes the following issues: conmon was updated to version 2.1.7: - Bumped go version to 1.19 bsc1209307. Bugfixes: - Fixed leaking symbolic links in the optsocketpath directory - Fixed oom handling issues bsc1208737. - Fixed OOM watcher for cgroupv2 oomkill events...
SUSE-SU-2023:2945-1 Security update for openssh
This update for openssh fixes the following issues: - CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent1's PKCS11 support could be abused to achieve remote code execution via a forwarded agent socket if those libraries were present on the victim's system and if the...
USN-6236-1 connman vulnerabilities
It was discovered that ConnMan could be made to write out of bounds. A remote attacker could possibly use this issue to cause ConnMan to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2021-26675,...
CVE-2023-28322
An information disclosure vulnerability exists in curl (versions <8.1.0) due to incorrect logic when reusing a handle for a POST request after a previous PUT request. If the CURLOPT_READFUNCTION was used during the PUT request, libcurl might erroneously use that same callback to request data t...
CVE-2022-41727 Denial of service via crafted TIFF image in golang.org/x/image/tiff
An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig. This could lead to a denial of service...
SUSE CVE-2013-1994
Multiple integer overflows in X.org libchromeXvMC and libchromeXvMCPro in openChrome 0.3.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 uniDRIOpenConnection and 2 uniDRIGetClientDriverName functions...
EulerOS 2.0 SP11 : dhcp (EulerOS-SA-2023-1032)
According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND 9 Supported...
Fedora 35 : curl (2022-39688a779d)
The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-39688a779d advisory. - url: use IDN decoded names for HSTS checks CVE-2022-42916 - httpproxy: restore the protocol pointer on error CVE-2022-42915 - netrc: replace fgets...
USN-5780-1 linux-oem-6.0 vulnerabilities
It was discovered that a memory leak existed in the IPv6 implementation of the Linux kernel. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2022-3524 It was discovered that the Bluetooth HCI implementation in the Linux kernel did not properly deallocate memory...
SUSE-SU-2022:4332-1 Security update for xen
This update for xen fixes the following issues: - CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let xenstored run out of memory bsc1204482 - CVE-2022-42309: xen: Xenstore: Guests can crash...
ALPINE-CVE-2022-32221
When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the...
SUSE-SU-2022:4007-1 Security update for xen
This update for xen fixes the following issues: - CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing bsc1203806. - CVE-2022-33748: Fixed DoS due to race in locking bsc1203807. - CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316,...
SUSE-SU-2022:3960-1 Security update for xen
This update for xen fixes the following issues: - CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let xenstored run out of memory bsc1204482 - CVE-2022-42309: xen: Xenstore: Guests can crash...
SUSE-SU-2022:3768-1 Security update for qemu
This update for qemu fixes the following issues: - CVE-2021-3409: Fixed an incomplete fix for CVE-2020-17380 and CVE-2020-25085 in sdhi controller. bsc1182282 - CVE-2021-4206: Fixed an integer overflow in cursoralloc which can lead to heap buffer overflow. bsc1198035 - CVE-2021-4207: Fixed a doub...
CVE-2022-43680
In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations...
Mageia: Security Advisory (MGASA-2022-0368)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
