16237 matches found
CVE-2023-22741 heap-over-flow in stun_parse_attribute in sofia-sip
Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. In affected versions Sofia-SIP lacks both message length and attributes length checks when it handles STUN packets, leading to controllable heap-over-flow. For example, in stunparseattribute, after ...
Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities
Summary IBM Cloud Pak for Security includes components with known vulnerabilities. These have been updated in the latest release and vulnerabilities have been addressed. Please follow the instructions in the Remediation/Fixes section below to update to the latest version of Cloud Pak for Security...
GSD-2023-1000787 bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
bpf: Clobber stack slot when writing over spilled PTRTOBTFID This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
systemd security and bug fix update
239-68.0.2.1 - Backport upstream pstore dmesg fix Orabug: 34850699 - Standardize ioctl BTRFSIOCQGROUPCREATE check and return -ENOTCONN, if quota is not enabled Orabug: 34694253 - Disable unprivileged BPF by default Orabug: 32870980 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev...
CVE-2022-46456
A buffer over-read was found in NASM. The issue occurs when a specially crafted file is processed by NASM when using the dbg output file format, causing the application to crash and disclose a limited amount of information...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a buffer over-read flaw in Linux Kernel (CVE-2020-28915)
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a buffer over-read flaw in Linux Kernel CVE-2020-28915. This Linux Kernel is used as part of the base image included in our service components. Please read the details for remediation below. Vulnerability...
Debian dla-3265 : exiv2 - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3265 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3265-1 [email protected]...
CVE-2022-33253
Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames...
CVE-2022-33283
Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check...
CVE-2022-33284
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame...
CVE-2022-33285
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames...
CVE-2022-33286
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames...
CVE-2022-33255
Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device...
CVE-2022-33252
Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame...
CVE-2022-22079
Denial of service while processing fastboot flash command on mmc due to buffer over read...
Command injection
Denial of service while processing fastboot flash command on mmc due to buffer over read...
Design/Logic Flaw
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames...
Information disclosure
Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check...