Lucene search
+L

7491 matches found

UbuntuCve
UbuntuCve
•added 2022/11/07 9:15 p.m.•42 views

CVE-2022-3872

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

8.6CVSS6.8AI score0.00907EPSS
SaveExploits0References3
CVE
CVE
•added 2022/11/07 12:00 a.m.•129 views

CVE-2022-3872

CVE-2022-3872 — QEMU SDHCI off-by-one read/write : A vulnerability in the SDHCI device (Buffer Data Port Register) when data_count == block_size, exploitable by a malicious guest to crash the QEMU process on the host, causing denial of service. Affected component: QEMU SDHCI read_dataport/write_d...

8.6CVSS6.9AI score0.00907EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/07 12:00 a.m.•2 views

CVE-2022-3872: Off-by-one Error

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

8.6CVSS6.9AI score0.00907EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/11/07 12:00 a.m.•35 views

CVE-2022-3872

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

8.3AI score0.00907EPSS
SaveExploits0References2
Mend
Mend
•added 2022/11/07 12:00 a.m.•2 views

CVE-2022-3872

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

9.2CVSS0.00907EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2022/11/07 12:00 a.m.•19 views

CVE-2022-3872

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

8.6CVSS8.1AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/11/07 12:00 a.m.•8 views

CVE-2022-3872

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

8.1AI score0.00907EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2022/11/07 12:00 a.m.•21 views

CVE-2022-3872

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

8.6CVSS6.9AI score0.00907EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2022/11/03 10:21 a.m.•66 views

OPERA1ER APT Hackers Targeted Dozens of Financial Organizations in Africa

A French-speaking threat actor dubbed OPERA1ER has been linked to a series of more than 30 successful cyber attacks aimed at banks, financial services, and telecom companies across Africa, Asia, and Latin America between 2018 and 2022. According to Singapore-headquartered cybersecurity company...

0.8AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/11/01 12:00 a.m.•21 views

SUSE: Security Advisory (SUSE-SU-2022:3817-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS7.8AI score0.02262EPSS
SaveExploits1References4
osv_oesa
osv_oesa
•added 2022/10/28 11:05 a.m.•14 views

OESA-2022-2030 libtasn1 security update

Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages.The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One ASN.1,as specified by the X.680 ITU-T recommendation parsing and...

9.1CVSS7AI score0.02262EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2022/10/28 12:00 a.m.•92 views

SUSE SLES12 Security Update : libtasn1 (SUSE-SU-2022:3797-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3797-1 advisory. Security issue fixed: - CVE-2018-1000654: Fixed a denial of service in the asn1 parser bsc1105435. - CVE-2017-6891: Added safety check to fix a...

9.1CVSS6.5AI score0.05585EPSS
SaveExploits2References10
osv_suse
osv_suse
•added 2022/10/26 4:04 p.m.•8 views

SUSE-SU-2022:3784-1 Security update for libtasn1

This update for libtasn1 fixes the following issues: - CVE-2021-46848: Fixed off-by-one array size check that affects asn1encodesimpleder bsc1204690...

9.1CVSS9.3AI score0.02262EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2022/10/25 7:15 p.m.•15 views

CVE-2022-31468

OX App Suite through 8.2 allows XSS via an attachment or OX Drive content when a client uses the len or off parameter...

6.1CVSS5.8AI score0.00527EPSS
SaveExploits0References1
NVD
NVD
•added 2022/10/25 7:15 p.m.•36 views

CVE-2022-31468

OX App Suite through 8.2 allows XSS via an attachment or OX Drive content when a client uses the len or off parameter...

6.1CVSS0.00527EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2022/10/25 7:00 a.m.•14 views

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

...

9.1CVSS7.5AI score0.02262EPSS
SaveExploits1
osv_ubuntu
osv_ubuntu
•added 2022/10/25 12:00 a.m.•14 views

UBUNTU-CVE-2021-46848

GNU Libtasn1 before 4.19.0 has an ETYPEOK off-by-one array size check that affects asn1encodesimpleder...

9.1CVSS6.8AI score0.02262EPSS
SaveExploits1References5
osv_alpine
osv_alpine
•added 2022/10/24 2:15 p.m.•9 views

ALPINE-CVE-2021-46848

GNU Libtasn1 before 4.19.0 has an ETYPEOK off-by-one array size check that affects asn1encodesimpleder...

9.1CVSS7AI score0.02262EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2022/10/24 2:15 p.m.•21 views

AZL-11318 CVE-2021-46848 affecting package libtasn1 for versions less than 4.19.0-1

GNU Libtasn1 before 4.19.0 has an ETYPEOK off-by-one array size check that affects asn1encodesimpleder...

9.1CVSS6.7AI score0.02262EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2022/10/24 2:15 p.m.•4 views

DEBIAN-CVE-2021-46848

GNU Libtasn1 before 4.19.0 has an ETYPEOK off-by-one array size check that affects asn1encodesimpleder...

9.1CVSS7.1AI score0.02262EPSS
SaveExploits1References1
Rows per page
Query Builder