Security Bulletin: A buffer overread, security restrictions bypass, a use-after-free, and other vulnerabilities might affect IBM Storage Defender – Resiliency Service

Summary IBM Storage Defender – Resiliency Service is vulnerable to a buffer overread, security restrictions bypass, a use-after-free, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2020-15945 DESCRIPTION: Lua 5.4.0 fixed in 5.4.1 has a segmentation fault in...

The vulnerabilities of PDF viewing and editing programs from Adobe Acrobat Document Cloud, Acrobat Reader Document Cloud, Acrobat 2020, Acrobat 2024, and Acrobat Reader 2020 involve reading data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Acrobat Reader Document Cloud, Acrobat 2020, Acrobat 2024, and Acrobat Reader 2020 involve reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to gain...

The vulnerability of Siemens Teamcenter Visualization’s lifecycle management system and Siemens Tecnomatix Plant Simulation’s software environment for modeling systems and processes lies in the reading of data beyond the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerability of Siemens Teamcenter Visualization’s lifecycle management system and Siemens Tecnomatix Plant Simulation’s simulation software environment is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to execute arbitrary...

The vulnerability of the _isst_if_getpci_dev() function (drivers/platform/x86/intel/speed_select_if/isst_if_common.c) in the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the isstifgetpcidev function drivers/platform/x86/intel/speedselectif/isstifcommon.c in the Linux kernel is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the do_active_device() function in the drivers/parport/procfs.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the doactivedevice function in the drivers/parport/procfs.c module of the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the can_resize() function in the drivers/md/dm-cache-target.c module of the Linux kernel allows an attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the canresize function in the drivers/md/dm-cache-target.c file of the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected information...

The vulnerability of the dbMount() function in the fs/jfs/jfs_dmap.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dbMount function in the fs/jfs/jfsdmap.c module of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the nested_svm_get_tdp_pdptr() function in the arch/x86/kvm/svm/nested.c module of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the nestedsvmgettdppdptr function in the arch/x86/kvm/svm/nested.c module of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protect...

The vulnerabilities of the functions dbAdjTree() and dbFindLeaf() in the kernel module fs/jfs/jfs_dmap.c of the Linux operating system allow a hacker to cause a service failure.

The vulnerability of the functions dbAdjTree and dbFindLeaf in the kernel module fs/jfs/jfsdmap.c of the Linux operating system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of Adobe InDesign’s automation tool for computer design, related to reading data beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the EVP_DecryptUpdate function in the OpenSSL library of the Sante PACS Server web server allows a hacker to execute arbitrary code.

The vulnerability of the EVPDecryptUpdate function in the OpenSSL library of the Sante PACS Server web server system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending specially crafte...

The vulnerability of the `bnxt_need_reserve_rings()` function in the `drivers/net/ethernet/broadcom/bnxt/bnxt.c` module of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the bnxtneedreserverings function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c module of the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

RockyLinux 9 : xorg-x11-server (RLSA-2024:9122)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:9122 advisory. xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents CVE-2024-31080 xorg-x11-server: Heap buffer overread/data leakage in...

The vulnerability of the gpiochip_getdesc() function in the drivers/gpio/gpiolib.c module of the Linux operating system’s GPIO driver allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the gpiochipgetdesc function in the drivers/gpio/gpiolib.c module of the Linux kernel’s GPIO driver is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the cpu_power_to_freq() function in the drivers/thermal/cpufreq_cooling.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the cpupowertofreq function in the drivers/thermal/cpufreqcooling.c module of the Linux kernel is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment, related to reading beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment related to buffer overflow attacks involves reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute...

xorg-x11-server security update

An update is available for xorg-x11-server. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list X.Org is an open-source implementation of the X Window System. It...

RLSA-2024:9122 Moderate: xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents CVE-2024-31080 xorg-x11-server:...

RLSA-2024:9093 Moderate: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents CVE-2024-31080 xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice CVE-2024-31081 xorg-x11-server: Use-after-free in...

xorg-x11-server-Xwayland security update

An update is available for xorg-x11-server-Xwayland. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Xwayland is an X server for running X clients under Wayland...