Ubuntu 16.04 ESM / 18.04 ESM : OpenCV vulnerabilities (USN-4818-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4818-1 advisory. It was discovered that OpenCV did not properly manage certain objects, leading to a divide-by-zero. If a user were tricked into loading a...

Linux kernel resource management error vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation. The Linux kernel suffers from a resource management error vulnerability that stems from a logic error in the NVMe-oF/TCP subsystem, found in drivers/nvme/target/tcp.c in nvmettcpfreecrypto, which i...

PT-2023-6049 · Linux +10 · Linux Kernel +10

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel due to a logical bug. This issue may allow a malicious user to cause a use-after-free and...

OESA-2023-1717 mosquitto security update

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

SUSE-SU-2023:4070-1 Security update for exiv2

This update for exiv2 fixes the following issues: - CVE-2018-19535: Fixed a heap-based buffer over-read which may cause a DoS via a crafted PNG file. bsc1117291...

Buffer Overflow

libfile.so is vulnerable to Buffer Overflow. The vulnerability exists due to the stack-based buffer over-read in the filecopystr function of funcs.c, which allows an attacker to cause an application crash through a maliciously crafted input...

Fedora 37 : bind / bind-dyndb-ldap (2023-87502c4a93)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-87502c4a93 advisory. BIND 9.18.19 Security Fixes - Previously, sending a specially crafted message over the control channel could cause the packet- parsing code to run o...

Buffer Over-read

gpac is vulnerable to Buffer Over-read. This vulnerability allows an attacker to execute arbitrary code on a vulnerable system by exploiting a bug in the way gpac handles memory...

Atos Unify OpenScape Command Injection Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A security vulnerability exists in Atos Unify OpenScape that originates from administrative access via web services...

glibc: Stack read overflow in getaddrinfo in no-aaaa mode

A flaw was found in glibc. When the getaddrinfo function is called with the AFUNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data...

RSEC-2023-5 Infinite loop, memory leak, and heap-based buffer over-read vulnerabilities

The haven R package is exposed to multiple vulnerabilities due to issues in its underlying ReadStat library. The specific flaws include an infinite loop condition, a memory leak associated with an iconvopen call, and a heap-based buffer over-read via an unterminated string. Exploitation of these...

CVE-2023-33027 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing rsn ies...

CVE-2023-33027 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing rsn ies...

CVE-2023-33026 Buffer over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing a NAN management frame...

CVE-2023-28571 Buffer Over-read in WLAN HOST

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan...

CVE-2023-28571 Buffer Over-read in WLAN HOST

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan...

CVE-2023-24849 Buffer Over-read in Data Modem

Information Disclosure in data Modem while parsing an FMTP line in an SDP message...

Qualcomm Chip Buffer Error Vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from a buffer error vulnerability that originates fr...

Qualcomm Chip Security Breach

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and is often manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from a security vulnerability that stems from...

Denial Of Service (DoS)

bind is vulnerable to Denial of Service DoS. The vulnerability exists due to a flaw in the networking code handling DNS-over-TLS queries due to an assertion failure causing an application crash...