1935 matches found
CVE-2023-53397: Off-by-one Error
In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in isexecutablesection The comparison should be = to prevent an out of bounds array access...
Off-by-one Error
Overview Affected versions of this package are vulnerable to Off-by-one Error via the processing of web content. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade thunderbird-ESR to version 140.3 or...
Off-by-one Error
Overview Affected versions of this package are vulnerable to Off-by-one Error via the processing of web content. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade Firefox to version 143.0 or higher...
Off-by-one Error
Overview Affected versions of this package are vulnerable to Off-by-one Error via the processing of web content. An attacker can execute arbitrary code or cause a denial of service by enticing a user to visit a specially crafted web page. Remediation Upgrade Firefox-ESR to version 140.3 or higher...
PT-2025-38585
An off-by-one error in the DrainCol::drop destructor could cause an unsafe memory copy operation to exceed the bounds of the associated vector. The error was related to the size of the data being copied in one of the ptr::copy invocations inside the destructor. When removing the first column from...
The vulnerability of the sqfs_search_dir function in the implementation of the IP packet defragmentation algorithm of the U-Boot loader allows a hacker to cause a service failure.
The vulnerability of the sqfssearchdir function in the implementation of the IP packet defragmentation algorithm of the U-Boot loader is related to an off-by-one error. Exploiting this vulnerability can allow a attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2025-53014
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overfl...
CVE-2025-38600 wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925mcuhwscan The ssid-ssids and sreq-ssids arrays have MT7925RNRSCANMAXBSSIDS elements so this = needs to be to prevent an out of bounds access...
CVE-2025-38600: Off-by-one Error
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925mcuhwscan The ssid-ssids and sreq-ssids arrays have MT7925RNRSCANMAXBSSIDS elements so this = needs to be to prevent an out of bounds access...
CVE-2025-54349
CVE-2025-54349 affects iperf3 prior to version 3.19.1, caused by an off-by-one in iperf_auth.c leading to a heap-based buffer overflow. Connected advisories confirm a patch was released with iperf3-3.19.1 (and related debian/alma/linux advisories reference the fix). Affected product is iperf3; ro...
CVE-2025-54349: Off-by-one Error
In iperf before 3.19.1, iperfauth.c has an off-by-one error and resultant heap-based buffer overflow...
CVE-2025-54349
In iperf before 3.19.1, iperfauth.c has an off-by-one error and resultant heap-based buffer overflow...
Amazon Linux 2 : libarchive (ALAS-2025-2932)
The version of libarchive installed on the remote host is prior to 3.1.2-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2932 advisory. A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling...
RockyLinux 8 : kernel-rt (RLSA-2025:11299)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:11299 advisory. kernel: cifs: potential buffer overflow in handling symlinks CVE-2022-49058 kernel: media: uvcvideo: Remove dangling pointers CVE-2024-58002 kernel:...
RLSA-2025:11299 Moderate: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: cifs: potential buffer overflow in handling symlinks CVE-2022-49058 kernel: media: uvcvideo: Remove dangling pointers CVE-2024-580...
Moderate: Red Hat Security Advisory: kernel-rt security update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
AlmaLinux 8 : kernel-rt (ALSA-2025:11299)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:11299 advisory. kernel: cifs: potential buffer overflow in handling symlinks CVE-2022-49058 kernel: media: uvcvideo: Remove dangling pointers CVE-2024-58002 kernel: medi...
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cifs: potential buffer overflow in handling symlinks CVE-2022-49058 kernel: media: uvcvideo: Remove dangling pointers CVE-2024-58002 kernel: media: uvcvideo: Fix double free in error path...
Off-by-one Error
Overview Affected versions of this package are vulnerable to Off-by-one Error via the InterpretImageFilename function in the image.c file. An attacker can access sensitive information from adjacent memory locations by providing specially crafted input. Remediation A fix was pushed into the master...
