USN-5695-1 linux-gcp vulnerabilities

It was discovered that the SUNRPC RDMA protocol implementation in the Linux kernel did not properly calculate the header size of a RPC message payload. A local attacker could use this to expose sensitive information kernel memory. CVE-2022-0812 Moshe Kol, Amit Klein and Yossi Gilad discovered tha...

CLSA-2022-1666283812 Fixed CVE-2022-1012 in kernel

secureseq: use the 64 bits of the siphash for port offset calculation CVE-2022-1012...

CLSA-2022-1666277963 Fixed CVE-2022-1012 in kernel

secureseq: use the 64 bits of the siphash for port offset calculation CVE-2022-1012...

DEBIAN-CVE-2022-43043

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function BDCheckSFTimeOffset at /bifs/fielddecode.c...

UBUNTU-CVE-2022-43043

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function BDCheckSFTimeOffset at /bifs/fielddecode.c...

Memory corruption

Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snapdragon Auto...

Qualcomm Automotive Multimedia 缓冲区错误漏洞

Qualcomm Automotive Multimedia is a support firmware for automotive multimedia from Qualcomm. A security vulnerability exists in Qualcomm Automotive Multimedia that originates from an out-of-range pointer offset that results in memory corruption...

GPAC 安全漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.1-DEV-rev368-gfd054169b-master, which stems from a function BDCheckSFTimeOffset in /bifs/fielddecode.c that contains a segmentation violation...

CVE-2022-33210

Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snapdragon Auto...

DEBIAN-CVE-2022-35051

OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b55af...

Siemens LOGO! 8 BM input validation error vulnerability

A security vulnerability exists in Siemens LOGO! 8 BM, a programming software for the Windows platform used in industrial environments from Siemens, Germany. The vulnerability stems from the inability to properly validate offset values defined in TCP packets when calling methods. An attacker coul...

CVE-2022-36363

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA1 All versions, LOGO! 12/24RCEo 6ED1052-2MD08-0BA1 All versions, LOGO! 230RCE 6ED1052-1FB08-0BA1 All versions, LOGO! 230RCEo 6ED1052-2FB08-0BA1 All versions, LOGO! 24CE 6ED1052-1CC08-0BA1 All versions, LOGO! 24CEo...

Design/Logic Flaw

A vulnerability has been identified in LOGO! 12/24RCE All versions, LOGO! 12/24RCEo All versions, LOGO! 230RCE All versions, LOGO! 230RCEo All versions, LOGO! 24CE All versions, LOGO! 24CEo All versions, LOGO! 24RCE All versions, LOGO! 24RCEo All versions, SIPLUS LOGO! 12/24RCE All versions, SIPL...

Siemens LOGO! 8 BM 输入验证错误漏洞

A security vulnerability exists in Siemens LOGO! 8 BM, a programming software for the Windows platform used in industrial environments from Siemens, Germany. The vulnerability stems from the inability to properly validate offset values defined in TCP packets when calling methods. An attacker coul...

CVE-2022-36363

CVE-2022-36363 affects Siemens LOGO! devices (LOGO! 12/24RCE, 230RCE, 24CE and SIPLUS variants). The issue is improper validation of an offset value in TCP packets when calling a method, which could allow an attacker to retrieve parts of memory content. Public sources note the vulnerability is ex...

CVE-2022-36363: Improper Validation of Specified Index, Position, or Offset in Input

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA1 All versions, LOGO! 12/24RCEo 6ED1052-2MD08-0BA1 All versions, LOGO! 230RCE 6ED1052-1FB08-0BA1 All versions, LOGO! 230RCEo 6ED1052-2FB08-0BA1 All versions, LOGO! 24CE 6ED1052-1CC08-0BA1 All versions, LOGO! 24CEo...

PT-2022-7653 · Siemens · Logo! 230Rce +6

Name of the Vulnerable Software and Affected Versions: LOGO! 12/24RCE versions 6ED1052-1MD08-0BA1 LOGO! 12/24RCEo versions 6ED1052-2MD08-0BA1 LOGO! 230RCE versions 6ED1052-1FB08-0BA1 LOGO! 230RCEo versions 6ED1052-2FB08-0BA1 LOGO! 24CE versions 6ED1052-1CC08-0BA1 LOGO! 24CEo versions...

PT-2022-34845 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.122 through 5.10.145 Description: The issue concerns a fix for the TX channel offset when using legacy interrupts in the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

PT-2022-34736

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.19 through 5.19, Linux Kernel versions prior to 6.0 Description The issue concerns a fix for the TX channel offset when using legacy interrupts in the Linux Kernel. The actual impact and attack plausibility have not yet...

PT-2022-34819

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.71 Description The issue concerns a fix for the TX channel offset when using legacy interrupts in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...