CVE-2024-53162 crypto: qat/qat_4xxx - fix off by one in uof_get_name()

In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat4xxx - fix off by one in uofgetname The fwobjs array has "numobjs" elements so the needs to be = to prevent an out of bounds read...

CVE-2024-53162

Linux kernel vulnerability CVE-2024-53162 in crypto: qat/qat_4xxx driver. Off-by-one in uof_get_name() can trigger out-of-bounds read when iterating fw_objs[] (/fw_objs has num_objs elements). The fix changes a comparison from > to >= to prevent reading beyond the array. No exploitation det...

Exploit for Off-by-one Error in F5 Nginx

CVE-2021-23017-POC A security issue in nginx resolver was iden...

CVE-2024-51554 off-by-one-error

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

The vulnerability of the octeontx2-af component in the Linux operating system allows a hacker to execute arbitrary code with elevated privileges.

The vulnerability of the octeontx2-af component in the Linux operating system is related to an off-by-one error in the rvudbgqsizewrite function. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...

Astra Linux – Vulnerability in ffmpeg

It was discovered that FFmpeg versions n5.1 to n6.1 contain an Off-by-one Error vulnerability in the libavfilter/avfshowspectrum.c file. This vulnerability allows attackers to cause a Denial of Service DoS attack through crafted inputs...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156-without-ip-command fork of worawit/CVE-2021-315...

CVE-2024-52533

A flaw was found in the Glib library. A buffer overflow condition can be triggered in certain conditions due to an off-by-one error in SOCKS4CONNMSGLEN. This issue may lead to an application crash or other undefined behavior...

CVE-2024-52533

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for a trailing '\0' character...

CVE-2024-52533

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for a trailing '\0' character...

CVE-2024-52533

GLib (GNOME GLib) is affected by CVE-2024-52533 due to an off-by-one error in gio/gsocks4aproxy.c, where SOCKS4_CONN_MSG_LEN does not account for a trailing NUL, causing a buffer overflow in versions before 2.82.1. The issue stems from an insufficient buffer size in SOCKS4_CONN_MSG_LEN. A fix has...

BIT-MEMCACHED-2023-46853

In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n...

ABB Cylon Aspect 3.08.00 Off-By-One

ABB Cylon Aspect 3.08.00 logMix/YumLookup.php Off-by-One Error in Log Parsing Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.00 Summary: ASPECT is an award-winning scalable building energy...

ABB Cylon Aspect 3.08.00 (log(Mix/Yum)Lookup.php) Off-by-One Error in Log Parsing

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description A vulnerability was identified in a PHP script where an off-by-one...

CVE-2024-47682

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix off-by-one error in sdreadblockcharacteristics Ff the device returns page 0xb1 with length 8 happens with qemu v2.x, for example, sdreadblockcharacteristics may attempt an out-of-bounds memory access when accessing...

CVE-2024-47686

The CVE-2024-47686 item concerns a Linux kernel vulnerability in the ep93xx clock driver. The root cause is an off-by-one in ep93xx_div_recalc_rate() where the psc->div[] array length (psc->num_div) did not correctly guard reads; the condition must be >= rather than > to prevent an ou...

CVE-2024-47682 scsi: sd: Fix off-by-one error in sd_read_block_characteristics()

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix off-by-one error in sdreadblockcharacteristics Ff the device returns page 0xb1 with length 8 happens with qemu v2.x, for example, sdreadblockcharacteristics may attempt an out-of-bounds memory access when accessing...

CVE-2024-47682

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix off-by-one error in sdreadblockcharacteristics Ff the device returns page 0xb1 with length 8 happens with qemu v2.x, for example, sdreadblockcharacteristics may attempt an out-of-bounds memory access when accessing...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an off-by-one issue in the allocflexgd function in the ext4 subsystem...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an off-by-one error in the sdreadblockcharacteristics function, which could lead to out-of-bounds memory...