212 matches found
CVE-2025-37939
CVE-2025-37939 affects the Linux kernel in the libbpf component, specifically the BTF.ext core_relo header handling. The issue arises when btf_ext_parse_info() reads fields of the core_relo header without confirming its presence, potentially triggering a buffer read overflow as reported by OSS-Fu...
CVE-2025-32776
OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. By writing specially crafted data to the matrixcustomframe file, an attacker can cause the custom kernel driver to read more bytes than provided by user space. This data will...
UBUNTU-CVE-2025-32776
OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. By writing specially crafted data to the matrixcustomframe file, an attacker can cause the custom kernel driver to read more bytes than provided by user space. This data will...
CLSA-2025-1744717794 grub2: Fix of 5 CVEs
CVE-2025-0624: net: Out-of-bounds write in grubnetsearchconfigfile - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap...
CLSA-2025-1744222859 grub2: Fix of 5 CVEs
CVE-2025-0624: net: Out-of-bounds write in grubnetsearchconfigfile - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap...
CLSA-2025-1744213211 grub2: Fix of 5 CVEs
CVE-2025-0624: net: Out-of-bounds write in grubnetsearchconfigfile - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap...
CVE-2025-32050 Libsoup: integer overflow in append_param_quoted
A flaw was found in libsoup. The libsoup appendparamquoted function may contain an overflow bug resulting in a buffer under-read...
CVE-2022-49614
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2022-49614
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2022-49614
This CVE entry documents a Linux kernel vulnerability in the nvme subsystem (CVE-2022-49614) where the root cause involves using a struct group for generic command dwords. The consequence described is that this could let a trace event know the full size of data intended to be copied and could sil...
raptor2 security update
2.0.9-3.0.1 - CVE-2024-57823: memcpy integer underflow and heap read overflow Orabug: 37476410...
The vulnerability of Linux operating system’s kernel components related to perf/core, which allows a hacker to trigger a service failure.
The vulnerability of the perf/core component of the Linux operating system’s kernel is related to reading data beyond the allowed range in memory within the function rballocaux. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to errors in reading beyond the allocated memory buffer in the smb2allocaterspbuf function. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2025-14757
Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw was found in the libsoup append param quoted function, which may contain an overflow bug resulting in a buffer under-read. Recommendations At the moment, there is no information about ...
PT-2024-8172 · Rockwell Automation · Rockwell Automation Thinmanager
Name of the Vulnerable Software and Affected Versions: Rockwell Automation ThinManage affected versions not specified Description: A Denial-of-Service issue exists in the affected product, potentially allowing a threat actor with network access to send crafted messages, resulting in...
curl: CVE-2024-7264: ASN.1 date parser overread
Vulnerability description not provided...
DEBIAN-CVE-2022-48806
In the Linux kernel, the following vulnerability has been resolved: eeprom: ee1004: limit i2c reads to I2CSMBUSBLOCKMAX Commit effa453168a7 "i2c: i801: Don't silently correct invalid transfer size" revealed that ee1004eepromread did not properly limit how many bytes to read at once. In particular...
RHEL 5 : gnutls (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gnutls: Heap read overflow in read-packet.c CVE-2017-5337 - The TLS protocol 1.2 and earlier, as used in...
CentOS 9 : glibc-2.34-83.el9.3
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the glibc-2.34-83.el9.3 build changelog. - Stack read overflow in getaddrinfo in no-aaaa mode 2234716 CVE-2023-4527 - potential use-after-free in gaihinet RHEL-2438 CVE-2023-4813...