CVE-2022-33297

Information disclosure due to buffer overread in Linux sensors...

Information disclosure

Information disclosure due to buffer overread in Linux sensors...

CVE-2022-24350

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI function 0x17 verifies that the output buffer lies within the command buffer but does not verify that output data does not go beyond the end of the command buffer. In particular, the GetFlashTable function ...

The vulnerability of TP-Link Archer AX21 (AX1800)’s microprogramming software allows a remote attacker to execute arbitrary code.

The vulnerability of TP-Link Archer AX21 AX1800 microprogramming software lies in reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

OESA-2023-1208 hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...

OESA-2023-1210 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return...

SUSE CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

CLSA-2023-1681151394 Fix CVE(s): CVE-2022-26253

SECURITY UPDATE: stack-based buffer overread in FUSE xlator - debian/patches/CVE-2022-26253.patch: access the graph-id only while event is associated specific to FUSE xlator. - CVE-2022-26253...

AZL-35066 CVE-2021-45985 affecting package ntopng for versions less than 5.2.1-2

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

DEBIAN-CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

AZL-26158 CVE-2021-45985 affecting package ntopng for versions less than 5.2.1-2

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

AZL-26155 CVE-2021-45985 affecting package memcached for versions less than 1.6.13-3

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

AZL-26047 CVE-2021-45985 affecting package lua for versions less than 5.4.3-5

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

UBUNTU-CVE-2021-45985

In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read...

PT-2023-12563 · Lua +1 · Lua +1

Name of the Vulnerable Software and Affected Versions: Lua version 5.4.3 Description: The issue is related to an erroneous finalizer called during a tail call, leading to a heap-based buffer over-read in Lua 5.4.3. Recommendations: For Lua version 5.4.3, at the moment, there is no information abo...

Lua 缓冲区错误漏洞

Lua is a lightweight, extensible open source scripting language from the LUA team. A security vulnerability exists in Lua version 5.4.3, which stems from a faulty terminator during a tail call that can lead to an over-read of a heap-based buffer...

CVE-2022-33297

CVE-2022-33297 describes an information disclosure caused by a buffer overread in Linux sensors. The root cause is a buffer overread within the Linux sensors component, allowing leakage of sensitive data. Exploitation is local with low complexity and no user interaction required; the attack targe...

CVE-2022-33297 Buffer overread in Linux Sensors

Information disclosure due to buffer overread in Linux sensors...

CVE-2022-33297 Buffer overread in Linux Sensors

Information disclosure due to buffer overread in Linux sensors...

PT-2023-13244 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read that occurs while parsing DNS response packets. Recommendations: At the moment, there is no information about a newer...