259 matches found
PT-2023-9323 · Dell · Dell Bsafe Crypto-C Micro Edition +1
Name of the Vulnerable Software and Affected Versions: Dell BSAFE Crypto-C Micro Edition version 4.1.5 Dell BSAFE Micro Edition Suite versions 4.0 through 4.6.1 Dell BSAFE Micro Edition Suite version 5.0 Description: The issue is related to an Out-of-bounds Read vulnerability and integer overflow...
USN-5913-1 linux-oem-5.14, linux-oem-5.17 vulnerabilities
It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execut...
USN-5895-1 mplayer vulnerabilities
It was discovered that MPlayer could be made to divide by zero when processing certain malformed media files. If a user were tricked into opening a specially crafted media file, an attacker could possibly use this issue to cause MPlayer to crash, resulting in a denial of service. CVE-2022-38850,...
SUSE CVE-2019-9038
An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is an out-of-bounds read problem with a SEGV in the function ReadNextCell in mat5.c...
SUSE CVE-2019-11719
When importing a curve25519 private key in PKCS8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services NSS library. This could lead to information disclosure. This vulnerability affects Firefox ESR 60.8, Firefox 68, and Thunderbird 60.8...
SUSE CVE-2022-2469
GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client...
SUSE CVE-2022-39320
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send i...
Design/Logic Flaw
Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service...
PT-2022-14764 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a possible out of bounds read due to a use after free in the btif a2dp sink command ready function of btif a2dp sink.cc. This could lead to local information...
PT-2022-5608 · Freerdp +10 · Freerdp +10
Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.9.0 Description: The issue is related to the FreeRDP implementation of the remote desktop protocol, where an attempt to add integers to too narrow types leads to the allocation of a buffer that is too small to hold...
MGASA-2022-0424 Updated libtiff packages fix security vulnerability
LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file. CVE-2022-3599 LibTIFF 4.4.0 has an out-of-bounds write in TIFFmemset in libtiff/tifunix.c:340 when called from processCropSelections,...
PT-2022-34182 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.136 Description: A potential security issue has been identified in the Linux Kernel, specifically in the arm64/poly1305 module. The issue is related to a read out-of-bounds error. The actual impact and...
PT-2022-33643 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.5 through v5.19.0 Description: A potential security issue exists due to a read out-of-bounds error in the arm64/poly1305 implementation. The actual impact and attack plausibility have not yet been proven...
Adobe Photoshop 资源管理错误漏洞
Adobe Photoshop is an application developed and distributed by Adobe for image processing. Adobe Photoshop suffers from an information leakage vulnerability, which acquires sensitive information that can be further read out of bounds. An attacker can exploit this vulnerability to obtain sensitive...
PT-2022-23940 · Trend Micro · Trend Micro Security
Name of the Vulnerable Software and Affected Versions: Trend Micro Security versions 2021 through 2022 Description: The issue allows an attacker to read sensitive information from other memory locations and cause a crash on an affected machine. It is an Out-Of-Bounds Read Information Disclosure...
Updated libgsasl packages fix security vulnerability
GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client. CVE-2022-2469...
CVE-2022-2469
GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client...
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname causing an out-of-bounds read.
...
Out-Of-Bound Read
libgsasl is vulnerable to server-side read-out-of-bounds. The vulnerability is with malicious authenticated GSS-API client which allows an attacker to cause out-of-bound reads...
