1258 matches found
SUSE-SU-2022:3784-1 Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2021-46848: Fixed off-by-one array size check that affects asn1encodesimpleder bsc1204690...
AZL-11318 CVE-2021-46848 affecting package libtasn1 for versions less than 4.19.0-1
GNU Libtasn1 before 4.19.0 has an ETYPEOK off-by-one array size check that affects asn1encodesimpleder...
EulerOS Virtualization 3.0.6.6 : qemu (EulerOS-SA-2022-2533)
According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The ahcicommitbuf function in ide/ahci.c in QEMU allows attackers to cause a denial of service NULL dereference when the command...
GSD-2022-1006397 of: fdt: fix off-by-one error in unflatten_dt_nodes()
of: fdt: fix off-by-one error in unflattendtnodes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.145 by commit...
GSD-2022-1006329 of: fdt: fix off-by-one error in unflatten_dt_nodes()
of: fdt: fix off-by-one error in unflattendtnodes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.11 by commit...
PT-2022-34624 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.70 Description: The issue is related to an off-by-one error in the unflatten dt nodes function. This error was introduced in version v4.7 and fixed in version v5.15.70. The actual impact and attack...
CVE-2022-3103
off-by-one in iouring module...
CVE-2022-3103
off-by-one in iouring module...
PT-2022-33944 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.8 through v5.15.60 Description: The issue is related to an off-by-one error in nvbios addr within the drm/nouveau component. The actual impact and potential for attack have not been proven yet. Recommendations: For...
PT-2022-34324 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to an off-by-one error in nvbios addr within the drm/nouveau component. The actual impact and potential for attack have not been fully determined. Recommendations: For...
PT-2022-34578 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.326 Description: The issue is related to an off-by-one error in nvbios addr within the drm/nouveau component. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux...
Hitachi Energy TXpert Hub CoreTec 4 Sudo Vulnerability
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Hitachi Energy Equipment: TXpert Hub CoreTec 4 Vulnerability: Off-by-one Error 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to take control of the system node and its information...
PT-2022-7359 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel io uring module affected versions not specified Description: The issue is related to an off-by-one error in the io uring module, specifically affecting the io sync cancel function in the io uring/cancel.c component. This error is...
CVE-2022-30216 - Authentication coercion of the Windows ?Server? service
In this blog, see how an off-by-one error could lead to domain controller access in Microsoft Server Service...
CVE-2022-30216 - Authentication coercion of the Windows “Server” service
In this blog, see how an off-by-one error could lead to domain controller access in Microsoft Server Service...
Denial Of Service (DoS)
rtl-433 is vulnerable to denial of service. The vulnerability exists due to an Off-by-one Error occurs in cmr113decode of rtl433 21.12 when decoding a maliciously crafted file which allows an attacker to crash the application via malicious input...
PT-2022-24287 · Systemd +9 · Systemd +9
Name of the Vulnerable Software and Affected Versions: Systemd affected versions not specified Description: An off-by-one Error issue was discovered in the format timespan function of time-util.c. An attacker could supply specific values for time and accuracy that lead to a buffer overrun in form...
Exploit for Off-by-one Error in F5 Nginx
CVE-2021-23017-PoC pip install -r requirements.txt pytho...