The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially create...

The vulnerability of the Local Discovery Server (LDS) software from Siemens, related to the execution of operations outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the Local Discovery Server LDS software from Siemens is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted messages...

The vulnerability of the httpd module of the microprogramming system used in Tenda AC18 routers allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the httpd microprogramming system for the Tenda AC18 router is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by using...

The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially create...

SUSE: Security Advisory (SUSE-SU-2022:2252-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for liblouis (SUSE-SU-2022:2252-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:2252-1 Security update for liblouis

This update for liblouis fixes the following issues: - CVE-2022-26981: fix buffer overrun in compilePassOpcode bsc1197085. - CVE-2022-31783: prevent an invalid memory write in compileRule bsc1200120...

The vulnerability of the read_multi_rsp function (gatt_sr.cc) in Android operating systems, which allows a hacker to increase their privileges

The vulnerability of the readmultirsp function gattsr.cc in Android operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort functions in the MariaDB database management system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Exectimetracker::getloops/Filesorttracker::reportuse/filesort functions in the MariaDB database management system is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability could allow a malicious actor to compromise the...

ruby:2.6 security, bug fix, and enhancement update

ruby 2.6.10-109 - Upgrade to Ruby 2.6.10. Resolves: rhbz2088415 - Fix buffer overrun in String-to-Float conversion. Resolves: CVE-2022-28739 - Fix FTBFS due to an incompatible load directive. - Fix a fiddle import test on an optimized glibc on Power 9...

RHEL 8 : ruby:2.6 (RHSA-2022:5338)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5338 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks...

ruby: Buffer overrun in String-to-Float conversion

A buffer overrun vulnerability was found in Ruby. The issue occurs in a conversion algorithm from a String to a Float that causes process termination due to a segmentation fault, but under limited circumstances. This flaw may cause an illegal memory read...

Moderate: Red Hat Security Advisory: ruby:2.6 security, bug fix, and enhancement update

An update for the ruby:2.6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

The vulnerability of the Microsoft Office software relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created PNG file within an Office document...

The vulnerability of the NVIDIA GPU Display Driver at the ECC level, related to writing beyond the buffer in memory, allows a hacker to cause a system failure and compromise data integrity.

The vulnerability of the NVIDIA GPU Display Driver at the ECC level is related to writing beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure and compromise data integrity...

The vulnerability of NTFS file system descriptors for the FUSE NTFS-3G module allows a attacker to execute arbitrary code with elevated privileges.

The vulnerability of NTFS file system descriptors for the FUSE NTFS-3G module relates to reading and writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially crafted request...

The vulnerability of the lim process in microprogramming software in embedded Qualcomm chips allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the lim process in microprogramming software in embedded Qualcomm chips is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the...

ruby:2.6 security, bug fix, and enhancement update

An update is available for rubygem-bson, rubygem-mysql2, ruby, rubygem-mongo, rubygem-pg, rubygem-abrt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is a...

RLSA-2022:5338 Moderate: ruby:2.6 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. The following packages have been upgraded to a later upstream version: ruby 2.6.10. BZ2089374 Security Fixes: Ruby: Buffer overrun in...

The vulnerability of the Java Runtime Environment software platform arises from operations that go beyond the buffer boundaries in memory, allowing attackers to compromise the integrity of the runtime environment or disable the security monitor.

The vulnerability of the Java Runtime Environment software platform arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the system or disable the security controller...