Design/Logic Flaw

A vulnerability has been identified in PADS Standard/Plus Viewer All versions. The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted PCB files. This could allow an attacker to execute code in the context of the current...

CVE-2022-34278

A vulnerability has been identified in PADS Standard/Plus Viewer All versions. The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing PCB files. This could allow an attacker to execute code in the context of the current process. FG-VD-22-0...

Siemens PADS Standard/Plus Viewer 缓冲区错误漏洞

PADS Standard and Standard Plus provide PCB schematic design and layout functionality in an intuitive and easy-to-use environment.A stack corruption vulnerability exists in Siemens PADS Standard/Plus Viewer, which can be exploited by an attacker to disclose information in the context of the curre...

Siemens PADS Standard/Plus Viewer 缓冲区错误漏洞

PADS Standard and Standard Plus provide PCB schematic design and layout functionality in an intuitive and easy-to-use environment.A stack corruption vulnerability exists in Siemens PADS Standard/Plus Viewer, which can be exploited by an attacker to disclose information in the context of the curre...

GSD-2022-1004049 tcp: tcp_rtx_synack() can be called from process context

tcp: tcprtxsynack can be called from process context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1003965 tcp: tcp_rtx_synack() can be called from process context

tcp: tcprtxsynack can be called from process context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003861 tcp: tcp_rtx_synack() can be called from process context

tcp: tcprtxsynack can be called from process context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003725 tcp: tcp_rtx_synack() can be called from process context

tcp: tcprtxsynack can be called from process context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003528 tcp: tcp_rtx_synack() can be called from process context

tcp: tcprtxsynack can be called from process context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.122 by commit...

GSD-2022-1003272 tcp: tcp_rtx_synack() can be called from process context

tcp: tcprtxsynack can be called from process context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

GSD-2022-1002971 tcp: tcp_rtx_synack() can be called from process context

tcp: tcprtxsynack can be called from process context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...

GSD-2022-1002625 tcp: tcp_rtx_synack() can be called from process context

tcp: tcprtxsynack can be called from process context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

PT-2022-31791

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue is related to the tcp rtx synack function, which can be called from process context. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-32312

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue is related to the tcp rtx synack function, which can be called from process context. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-31535

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to the tcp rtx synack function, which can be called from process context. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-32228

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to the tcp rtx synack function, which can be called from process context. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-32124

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to the tcp rtx synack function, which can be called from process context. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-31234

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description The issue is related to the tcp rtx synack function, which can be called from process context. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

CVE-2022-29033

A vulnerability has been identified in JT2Go All versions V13.3.0.3, Teamcenter Visualization V13.3 All versions V13.3.0.3, Teamcenter Visualization V14.0 All versions V14.0.0.1. The CGMNISTLoader.dll library is vulnerable to uninitialized pointer free while parsing specially crafted CGM files. A...

Double free

A vulnerability has been identified in JT2Go All versions V13.3.0.3, Teamcenter Visualization V13.3 All versions V13.3.0.3, Teamcenter Visualization V14.0 All versions V14.0.0.1. The CGMNISTLoader.dll library contains a double free vulnerability while parsing specially crafted CGM files. An...