CVE-2023-22745 Buffer Overlow in TSS2_RC_Decode in tpm2-tss

tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In versions prior to 4.1.0-rc0, 4.0.1, and 3.2.2-rc1, Tss2RCSetHandler and Tss2RCDecode both index into layerhandler with an 8 bit layer number, but the array...

SUSE SLES12 Security Update : php5 (SUSE-SU-2015:1425-1)

PHP was updated to fix two security issues. The following vulnerabilities were fixed : - CVE-2015-5589: PHP could be crashed when processing an invalid file with the 'phar' extension with a segfault in Phar::convertToData, leading to Denial of Service DOS bsc938721 - CVE-2015-5590: PHP could be...

openSUSE Security Update : php5 (openSUSE-2015-536)

PHP was updated to fix two security issues. The following vulnerabilities were fixed : - CVE-2015-5589: PHP could be crashed when processing an invalid file with the 'phar' extension with a segfault in Phar::convertToData, leading to Denial of Service DOS boo938721 - CVE-2015-5590: PHP could be...

Ubuntu Update for thunderbird vulnerabilities USN-1050-1

Ubuntu Update for Linux kernel vulnerabilities USN-1050-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10501.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for thunderbird vulnerabilities USN-1050-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

MS05-049: Vulnerabilities in Windows Shell Could Allow Remote Code Execution (900725)

The remote version of Windows contains a version of the Windows Shell that has several vulnerabilities. An attacker may exploit these vulnerabilities by : - Sending a malformed .lnk file a to user on the remote host to trigger an overflow. - Sending a malformed HTML document to a user on the remo...

CVE-2001-0115

The CVE describes a buffer overflow in the arp command on Solaris 7 and earlier, exploitable locally via a long -f parameter. Affected component: arp. Root cause: inadequate bounds checking in the -f option. Impact, as per the sources: complete confidentiality, integrity, and availability losses ...