CVE-2022-4433

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4433

CVE-2022-4433 is a local, privilege-elevation vulnerability in the Lenovo ThinkPad X13s BIOS, specifically in the LenovoSetupConfigDxe driver. The issue is a buffer over-read that can disclose sensitive information to a local attacker with elevated privileges. Multiple sources confirm the affecte...

CVE-2022-4432

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4432

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4432

CVE-2022-4432 describes a buffer over-read in the ThinkPad X13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to disclose information. Supported by multiple vendors/documents, the vulnerability affects the BIOS module PersistenceConfigDxe on Lenovo Th...

PT-2023-14451 · Lenovo · Thinkpad X13S

Name of the Vulnerable Software and Affected Versions: ThinkPad X13s BIOS affected versions not specified Description: A buffer over-read issue was reported in the LenovoSetupConfigDxe driver, potentially allowing a local attacker with elevated privileges to cause information disclosure...

PT-2023-14450 · Lenovo · Thinkpad X13S Bios

Name of the Vulnerable Software and Affected Versions: ThinkPadX13s BIOS affected versions not specified Description: A buffer over-read issue was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver, potentially allowing a local attacker with elevated privileges to cause information...

CVE-2022-4435: Buffer Over-read

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

EulerOS 2.0 SP11 : sudo (EulerOS-SA-2023-1047)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a...

PT-2023-14452 · Lenovo · Thinkpad X13S Bios Driver

Name of the Vulnerable Software and Affected Versions: ThinkPadX13s BIOS driver affected versions not specified Description: A buffer over-read issue was reported in the ThinkPadX13s BIOS driver, potentially allowing a local attacker with elevated privileges to cause information disclosure...

EulerOS 2.0 SP11 : sudo (EulerOS-SA-2023-1022)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a...

CVE-2022-4434: Buffer Over-read

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure...

PT-2023-14455 · Lenovo · Thinkpad X13S Bios

Name of the Vulnerable Software and Affected Versions: ThinkPad X13s BIOS affected versions not specified Description: A buffer over-read issue was reported in the LenovoRemoteConfigUpdateDxe driver, potentially allowing a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4433: Buffer Over-read

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4432: Buffer Over-read

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

Amazon Linux 2 : libxml2 (ALAS-2021-1662)

The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1662 advisory. GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at...

CVE-2022-44446: Buffer Over-read

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services...

CVE-2022-44443: Buffer Over-read

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services...

CVE-2022-44445: Buffer Over-read

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services...

openSUSE 15 Security Update : mbedtls (openSUSE-SU-2022:10257-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:10257-1 advisory. - An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based buffer...