PT-2025-25992

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0 Description The issue is related to an out-of-range error in the aq vec index in the Linux kernel's Atlantic driver. The final update statement of a for loop exceeds the array range, and the dereference of...

CVE-2022-2675

Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 using firmware version 0.1.35 can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1...

Design/Logic Flaw

This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this vulnerability is that the security ACL drop rule might be bypassed if a NAT ACL rule filter with permit action matches the packet flow. This could allow a host with an...

CVE-2022-2675

The CVE-2022-2675 entry concerns Unitree Go 1 robotics platform (versions H0.1.7–H0.1.9; firmware 0.1.35) that can be powered down by an attacker within normal RF range without authentication. Root cause: unauthenticated RF-based shutdown capability reported across affected revisions. Connected P...

CVE-2022-2675 Unitree Go 1 "Robot Dog" Unauthenticated Remote Power Down

Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 using firmware version 0.1.35 can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1...

CVE-2022-2675: Improper Authorization

Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 using firmware version 0.1.35 can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1...

Unitree Go 1 security vulnerability

The Unitree Go 1 is a robotics dog from the Chinese company Unitree. A security vulnerability exists in the Unitree Go 1 robotics platform H0.1.7 and H0.1.9 and its accompanying firmware version 0.1.35, which originates from the fact that an attacker in the normal range of the RF can turn it off...

CVE-2022-2675

Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 using firmware version 0.1.35 can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1...

Android kernel Heap Buffer Overflow DoS

The vulnerability of the remappfnrange function in Android operating system kernels stems from the issue where the operation goes beyond the buffer boundaries in memory when processing the parameter vma-vmpageprot. Exploiting this vulnerability can allow a remote attacker to cause a service failu...

PostgreSQL JDBC Driver SQL injection vulnerability

PostgreSQL is a free object-relational database management system from the PostgreSQL organization. The system supports most of the SQL standards and provides many other features such as foreign keys, triggers, views, etc. The PostgreSQL JDBC Driver is an open source JDBC driver written in Pure...

Denial Of Service (DoS)

go is vulnerable to Denial Of Service DoS. The vulnerability exists because of an index out of range in Float.GobDecode which allows a malicious user to cause an application crash...

mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemfuncin::cleanup/Item::cleanupprocessor...

mariadb: server crash in Item_args::walk_args

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Itemargs::walkargs...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2193)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google, Inc. A code execution vulnerability exists in Google Android, which is caused by kernel memory size mapping in remappfnrange. An attacker could exploit this vulnerability to execute arbitrary code on the system...

e2fsprogs:ext2fs_read_bitmap_fuzzer: Heap-buffer-overflow in ba_get_bmap_range

Project: https://github.com/tytso/e2fsprogs.git Detailed Report: https://oss-fuzz.com/testcase?key=5899175945961472 Project: e2fsprogs Fuzzing Engine: afl Fuzz Target: ext2fsreadbitmapfuzzer Job Type: aflasane2fsprogs Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

PT-2022-22947 · Ibm · Ibm Urbancode Deploy

Name of the Vulnerable Software and Affected Versions: IBM UrbanCode Deploy versions 6.2.0.0 through 6.2.7.16 IBM UrbanCode Deploy versions 7.0.0.0 through 7.0.5.11 IBM UrbanCode Deploy versions 7.1.0.0 through 7.1.2.7 IBM UrbanCode Deploy versions 7.2.0.0 through 7.2.3.0 Description: The issue...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Detailed Report: https://oss-fuzz.com/testcase?key=6355158195372032 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

SUSE SLES15 Security Update : samba (SUSE-SU-2022:2585-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2585-1 advisory. - A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill...

EulerOS Virtualization 2.9.1 : vim (EulerOS-SA-2022-2193)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in vim/vim prior to 8.2. CVE-2022-0319 - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to...