17249 matches found
CVE-2022-33235
CVE-2022-33235 describes information disclosure due to a buffer over-read in WLAN firmware when parsing security context info attributes. Affected are Qualcomm Snapdragon components across multiple lines, including Snapdragon Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consume...
Ubuntu 16.04 ESM : GNU C Library vulnerabilities (USN-5768-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5768-1 advisory. Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could...
Updated imagemagick packages fix security vulnerability
A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks. CVE-2021-3574 A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows a...
Medium: tcpdump
Issue Overview: The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint for VRRP version 3, a different vulnerability than CVE-2018-14463. CVE-2019-15167 Affected Packages: tcpdump Issue Correction: Run yum update tcpdump or yum update --advisory ALAS-2022-1641 to...
CVE-2022-42780: Buffer Over-read
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services...
CVE-2022-42768: Buffer Over-read
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services...
CVE-2022-42762: Buffer Over-read
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services...
CVE-2022-42758: Buffer Over-read
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services...
CVE-2022-42781: Buffer Over-read
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services...
CVE-2022-42779: Buffer Over-read
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services...
CVE-2022-42774: Buffer Over-read
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services...
CVE-2022-42757: Buffer Over-read
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services...
CVE-2022-39132: Buffer Over-read
In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel...
CVE-2022-42759: Buffer Over-read
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services...
SUSE SLES12 Security Update : sudo (SUSE-SU-2022:4280-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4280-1 advisory. Security fixes: - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and...
SUSE-SU-2022:4280-1 Security update for sudo
This update for sudo fixes the following issues: Security fixes: - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt password backend bsc1204986. Other: - Make sure SIGCHLD is not ignored when sudo is executed;...
Ubuntu 16.04 ESM : libsamplerate vulnerability (USN-5749-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5749-1 advisory. Erik de Castro Lopo and Agostino Sarubbo discovered that libsamplerate did not properly perform bounds checking. If a user were tricked into processing a speciall...
SUSE-SU-2022:4240-1 Security update for sudo
This update for sudo fixes the following issues: Security fixes: - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt password backend bsc1204986. Other: - Make sure SIGCHLD is not ignored when sudo is executed;...
