Lucene search
+L

3945 matches found

OSV
OSV
added 2024/01/23 9:15 a.m.13 views

AZL-34878 CVE-2024-23849 affecting package kernel for versions less than 6.6.35.1-4

In rdsrecvtracklatency in net/rds/afrds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDSMSGRXDGRAMTRACEMAX comparison, resulting in out-of-bounds access...

5.5CVSS6.5AI score0.00309EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/23 9:15 a.m.6 views

UBUNTU-CVE-2024-23849

In rdsrecvtracklatency in net/rds/afrds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDSMSGRXDGRAMTRACEMAX comparison, resulting in out-of-bounds access...

5.5CVSS6.5AI score0.00309EPSS
SaveExploits0References21
UbuntuCve
UbuntuCve
added 2024/01/23 12:00 a.m.47 views

CVE-2024-23849

In rdsrecvtracklatency in net/rds/afrds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDSMSGRXDGRAMTRACEMAX comparison, resulting in out-of-bounds access...

5.5CVSS6.2AI score0.00309EPSS
SaveExploits0References20
Debian CVE
Debian CVE
added 2024/01/23 12:00 a.m.45 views

CVE-2024-23849

In rdsrecvtracklatency in net/rds/afrds.c in the Linux kernel through 6.7.1, there is an off-by-one error for an RDSMSGRXDGRAMTRACEMAX comparison, resulting in out-of-bounds access...

5.5CVSS6.2AI score0.00309EPSS
SaveExploits0
CVE
CVE
added 2024/01/23 12:00 a.m.221 views

CVE-2024-23849

CVE-2024-23849 affects the Linux kernel’s RDS path (net/rds/af_rds.c) up to and including 6.7.1. The issue is an off-by-one in the RDS_MSG_RX_DGRAM_TRACE_MAX comparison, causing out-of-bounds access. Connected advisories confirm this vulnerability and show it in multiple vendor/OS contexts (Debia...

5.5CVSS5.9AI score0.00309EPSS
SaveExploits0References9Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/19 12:00 a.m.14 views

PT-2024-1292

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 6.7.1 Description The issue is related to an off-by-one error in the rds recv track latency function in the Linux kernel, specifically in the net/rds/af rds.c file. This error occurs during an RDS MSG RX DGRAM TRA...

9.1CVSS5.4AI score0.51248EPSS
SaveExploits20References707
Positive Technologies
Positive Technologies
added 2023/12/29 12:00 a.m.7 views

PT-2023-9660 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg versions n5.1 to n6.1 Description: The issue is related to an Off-by-one Error vulnerability in the libavfilter/avf showspectrum.c component of the FFmpeg library. This vulnerability allows attackers to cause a Denial of Service DoS vi...

9.1CVSS5.9AI score0.01545EPSS
SaveExploits8References111
OSV
OSV
added 2023/12/15 5:57 p.m.12 views

MGASA-2023-0346 Updated gimp packages fix security vulnerabilities

GIMP has been updated to version 2.10.36 to fix several security issues. CVE-2023-44441: GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-44442: GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-44443: GIMP P...

7.8CVSS6.7AI score0.93639EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/12/15 12:00 a.m.33 views

Amazon Linux 2023 : memcached, memcached-devel, memcached-selinux (ALAS2023-2023-449)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-449 advisory. In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the get substring. CVE-2023-46852 In Memcached before 1.6.22...

9.8CVSS7.9AI score0.00778EPSS
SaveExploits0References6
Amazon
Amazon
added 2023/12/14 12:00 a.m.10 views

Medium: memcached

Issue Overview: In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the "get" substring. CVE-2023-46852 In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is us...

9.8CVSS7.2AI score0.00778EPSS
SaveExploits0
OSV
OSV
added 2023/12/08 4:53 p.m.17 views

SUSE-SU-2023:4697-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2023-44442: Fixed PSD File Parsing Heap-based bsc1217161. - CVE-2023-44444: Fixed PSP File Parsing Off-By-One bsc1217163...

7.8CVSS6.3AI score0.61427EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2023/11/18 12:00 a.m.33 views

CBL Mariner 2.0 Security Update: memcached (CVE-2023-46853)

The version of memcached installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-46853 advisory. - In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \...

9.8CVSS8.2AI score0.00756EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/11/16 1:54 a.m.6 views

SUSE CVE-2023-44444

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicio...

7.8CVSS7.7AI score0.56404EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2023/11/15 12:00 a.m.123 views

CVE-2023-44444

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicio...

7.8CVSS7.5AI score0.56404EPSS
SaveExploits0References4
OSV
OSV
added 2023/11/15 12:00 a.m.7 views

UBUNTU-CVE-2023-44444

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicio...

7.8CVSS7.6AI score0.56404EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2023/11/14 12:00 a.m.32 views

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files...

7.8CVSS6.7AI score0.56404EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/11/13 12:00 a.m.40 views

Ubuntu 22.04 LTS / 23.04 / 23.10 : Memcached vulnerabilities (USN-6476-1)

The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6476-1 advisory. It was discovered that Memcached incorrectly handled certain multiget requests in proxy mode. A remote attacker could use this issue to...

9.8CVSS8AI score0.00778EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:00 a.m.26 views

FreeBSD : cyrus-sasl -- Fix off by one error (a80c6273-988c-11ec-83ac-080027415d17)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a80c6273-988c-11ec-83ac-080027415d17 advisory. - cyrus-sasl aka Cyrus SASL 2.1.27 has an out-of-bounds write leading to unauthenticated remote...

7.5CVSS7.5AI score0.08036EPSS
SaveExploits1References3
Code423n4
Code423n4
added 2023/11/02 12:00 a.m.13 views

tranche id check has off-by-one error

Lines of code Vulnerability details Impact tranche id check has off-by-one error Proof of Concept In TestOmniPool.t.sol, we add the following POC function testSetTrancheCountPOC public for uint256 i = 4; i 256; i++ pool.setTrancheCountaddressoToken, uint8i; oToken.deposit0, 255, 1 ether; we run t...

6.9AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2023/11/01 7:00 a.m.5 views

In Memcached before 1.6.22 an off-by-one error exists when processing proxy requests in proxy mode if \n is used instead of \r\n.

...

9.8CVSS9.3AI score0.00756EPSS
SaveExploits0
Rows per page
Query Builder