perfetto:trace_processor_fuzzer: Container-overflow in std::__1::enable_if<

Detailed Report: https://oss-fuzz.com/testcase?key=6605926663847936 Project: perfetto Fuzzing Engine: centipede Fuzz Target: traceprocessorfuzzer Job Type: centipedeasanperfetto Platform Id: linux Crash Type: Container-overflow WRITE 3 Crash Address: 0x603000059120 Crash State: std::1::enableif...

kernel: net: CPU soft lockup in TC mirred egress-to-ingress action

A flaw was found in the Linux kernel Traffic Control TC subsystem. Using a specific networking configuration redirecting egress packets to ingress using TC action "mirred" a local unprivileged user could trigger a CPU soft lockup ABBA deadlock when the transport protocol in use TCP or SCTP does a...

March 14, 2023—KB5023697 (OS Build 14393.5786) - EXPIRED

None None...

CVE-2023-1370

"Json-smart" https://netplex.github.io/json-smart/ is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or...

CVE-2023-1370 Stack exhaustion in json-smart leads to denial of service when parsing malformed JSON

Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays a...

CVE-2023-1370

The CVE-2023-1370 entry concerns Netplex Json-smart, a JSON processing library. Public materials in the connected docs confirm a stack-exhaustion (DoS) due to unbounded nesting when parsing nested arrays/objects in JSON input, caused by recursive parsing. Affected version range is 2.5.0 through 2...

CVE-2023-1370

Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays a...

CVE-2023-1370 Stack exhaustion in json-smart leads to denial of service when parsing malformed JSON

Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays a...

CVE-2022-33256

Memory corruption due to improper validation of array index in Multi-mode call processor...

Memory corruption

Memory corruption due to improper validation of array index in Multi-mode call processor...

GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a multipart/form-data boundary field which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function.

...

Intel® Optane™ DC Persistent Memory for Windows Advisory

Summary: A potential security vulnerability in the Intel® Optane™ DC Persistent Memory for Windows software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0106 Description: Incorrect default...

Schneider Electric EcoStruxure Products, Modicon PLCs, and Programmable Automation Controllers Improper Check For Unusual or Exceptional Conditions (CVE-2022-45788)

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert All...

Debian: Security Advisory (DLA-573-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-33256

CVE-2022-33256: A memory corruption issue in Qualcomm closed‑source components due to improper validation of an array index in the Multi‑mode call processor. Affected: Qualcomm closed‑source components; Root cause: improper array index validation. Impact: Critical (CVSS v3.1: 9.8) with remote cod...

CVE-2022-33256 Improper validation of array index in Multi-mode call processor

Memory corruption due to improper validation of array index in Multi-mode call processor...

CVE-2022-33256 Improper validation of array index in Multi-mode call processor

Memory corruption due to improper validation of array index in Multi-mode call processor...

PT-2023-13267 · Qualcomm · Snapdragon +61

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption due to improper validation of an array index in the Multi-mode call processor. No information is provided abou...

CVE-2022-33256: Improper Validation of Array Index

Memory corruption due to improper validation of array index in Multi-mode call processor...

SUSE CVE-2023-27371

GNU libmicrohttpd before 0.9.76 allows remote DoS Denial of Service due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHDcreatepostprocessor method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more '\0' bytes in a...