CVE-2025-38463

The CVE-2025-38463 issue is a Linux kernel vulnerability in the TCP skb remaining space calculation. The bug arises from signedness handling when computing copy = size_goal - skb->len, where copy becomes an unsigned result that is then assigned to a 64-bit signed copy, causing copy to stay non...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from the presence of an overflow problem...

Google TensorFlow buffer overflow vulnerability (CNVD-2022-80680)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A buffer overflow vulnerability exists in Google TensorFlow, which stems from tf.rawops.ResizeNearestNeighborGrad's lack of length size validation of the input data. validation, an attacker could exploi...

FreeBSD : pcre -- heap overflow vulnerability (6900e6f1-4a79-11e5-9ad8-14dae9d210b8)

Guanxing Wen reports : PCRE library is prone to a vulnerability which leads to Heap Overflow. During the compilation of a malformed regular expression, more data is written on the malloced block than the expected size output by compileregex. The Heap Overflow vulnerability is caused by the...

The IIS server vulnerability analysis-vulnerability warning-the black bar safety net

4 on 1 to 5 November, in Microsoft's patch day, Microsoft released a more high-risk vulnerabilities, one of MS15-0 3 4 vulnerability that affects most widely, will cause the IIS server to blue screen crash, special circumstances or lead to information disclosure. Alibaba security research...

[SECURITY] [DSA 275-1] New lpr-ppd packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 275-1 [email protected] http://www.debian.org/security/ Martin Schulze April 2nd, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-062-1] rxvt buffer overflow

Package : rxvt Problem type : buffer overflow Debian-specific: no Samuel Dralet reported on bugtraq that version 2.6.2 of rxvt a VT102 terminal emulator for X have a buffer overflow in the ttprintf function. A local user could abuse this making rxvt print a special string using that function, for...

QPC FTPd Directory Traversal and BoF Vulnerabilities

Strumpf Noir Society Advisories ! Public release ! -- -= QPC FTPd Directory Traversal and BoF Vulnerabilities =- Release date: Saturday, April 14, 2001 Introduction: QPC's ftpd is the ftp server component of the company's QVT/NET and QVT/Term software suites for MS Windows. The ftpd and the rest ...