EulerOS 2.0 SP5 : sudo (EulerOS-SA-2023-1516)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a...

Security Bulletin: Multiple Security vulnerabilities fixed and shipped with IBM Security Verify Bridge (Docker version) (CVE-2022-2175, CVE-2022-2526, CVE-2022-40674, CVE-2022-3515)

Summary IBM Security Verify Bridge docker version fixed the vulnerabilities listed below. The vulnerable components have been updated to fixed versions. Vulnerability Details CVEID:CVE-2022-2175 DESCRIPTION: Vim could allow a remote attacker to execute arbitrary code on the system, caused by a...

Moderate: Red Hat Security Advisory: zlib security update

An update for zlib is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CVE-2022-40535 Buffer Over-read in WLAN

Transient DOS due to buffer over-read in WLAN while sending a packet to device...

CVE-2022-40535

CVE-2022-40535 is a buffer over-read in WLAN that can cause a transient Denial of Service when sending a packet to a Qualcomm WLAN component. The entry is rated HIGH (CVSS 3.1 base 7.5) with network attack vector and no user interaction. Public details in the connected sources indicate Qualcomm c...

CVE-2022-40535 Buffer Over-read in WLAN

Transient DOS due to buffer over-read in WLAN while sending a packet to device...

CVE-2022-33309 Buiffer over-read in WLAN Firmware.

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes...

CVE-2022-33309

CVE-2022-33309 is a Transient DoS caused by a buffer over-read in WLAN Firmware when parsing a secure FTMR frame smaller than 39 bytes. The vulnerability affects Qualcomm closed‑source WLAN Firmware components and is described in the CVE entries (NVD/Red Hat/PRION/CVEList) with a base score of 7....

PT-2023-13311 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a transient DOS due to a buffer over-read in the WLAN Firmware. This occurs when the firmware is parsing a secure FTMR frame with a size lesser than 39 Bytes...

CVE-2022-41862

In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes...

CVE-2022-41862

In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes...

CVE-2022-41862

In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes...

CVE-2022-41862

In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes...

CVE-2023-26253

A flaw was found in Gluster, where GlusterFS is vulnerable to a denial of service caused by a stack-based buffer over-read flaw in xlators/mount/fuse/src/fuse-bridge.c. A remote attacker can cause the application to crash by sending a specially-crafted request...

Siemens Buffer Over-Read in Wibu-Systems CodeMeter Runtime (CVE-2021-20094)

A denial of service vulnerability exists in Wibu-Systems CodeMeter versions 7.21a. An unauthenticated remote attacker can exploit this issue to crash the CodeMeter Runtime Server. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

SUSE-SU-2023:0496-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool bsc1140877...

SUSE-SU-2023:0494-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder bsc1202692. - CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool bsc1140877...

Amazon Linux AMI : libconfuse (ALAS-2023-1692)

The version of libconfuse installed on the remote host is prior to 2.7-4.4. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1692 advisory. cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read. CVE-2022-40320 Tenable has extracted the precedi...

SUSE SLES15: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2023:0480-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0480-1 advisory. - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder bsc1202692. - CVE-2019-13283: Fixed heap-based buffer...

SUSE-SU-2023:0480-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder bsc1202692. - CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool bsc1140877...