The vulnerability of the seg6genl_sethmac function in the Linux operating system allows a hacker to disclose sensitive information that is protected by this function.

The vulnerability of the seg6genlsethmac function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose protected information...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An input validation error vulnerability exists in versions of Linux kernel prior to 6.3.9, which stems from ksmbd not validating the SMB request protocol ID, and can be exploit...

SUSE CVE-2023-3603

A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions. The malicious client can request up to 4GB SFTP reads, causing allocation of up to 4GB buffers, which was not being checked for failure. This will likely crash the authenticat...

UNISOC Chipsets 缓冲区错误漏洞

UNISOC Chipsets are chipsets from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in some UNISOC products, which originates from a lack of boundary checking in the hciserver and may result in out-of-bounds reads. The following products are affected:...

OESA-2023-1413 kubernetes security update

Container cluster management. Security Fixes: Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are...

ROS-2-907

2.907 Vulnerability in Mozilla Thunderbird email client CVE-2021-29964, CVE-2021-29967 1. Vulnerability Description: CVE-2021-29964 A vulnerability in the Mozilla Thunderbird email client, is related to boundary conditions. Exploitation of the vulnerability could allow an attacker acting remotely...

ROS-2-2124

2.2124 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

Amazon Linux 2 : mod_security (ALAS-2023-2098)

The version of modsecurity installed on the remote host is prior to 2.9.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2098 advisory. In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the...

编号撤回

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a resource management error vulnerability, which arises from a mix-up in the instructions responsible for freeing memory in the Netfilter subsyste...

CVE-2023-3117

A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAPNETADMIN capability to crash or potentially...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from a heap buffer overflow in the encode of the miscdata.cpp file, which may result in out-of-bounds reads...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that originates in btmblebatchscan.cc's btmblebatchscanfiltertrackadvvsecback, where out-of-bounds reads are possible due to incorrect bounds checking, which could lead to the...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from the presence of a missing bounds check in FaceStatsAnalyzer::InterpolateWeightList in the facestatsanalyzer.cc file, which may result in out-of-bounds reads...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from incorrect boundary checking, which may result in out-of-bounds reads, which could lead to remote information leaks...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel that stems from a heap buffer overflow in BuildSetTcsFci of the protocolmiscbuilder.cpp file, which may result in out-of-bounds reads...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from incorrect input validation, which could result in out-of-bounds reads, which could lead to local information leaks...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which originates in Exynosparsinguserdataregistereditutt35 in VendorVideoAPI.cpp, where due to a lack of bounds checking, out-of-bounds reads may be possible, which could lead to local...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking, which could result in out-of-bounds reads, which could lead to remote information leaks...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a heap buffer overflow, which could result in out-of-bounds reads, which could lead to the disclosure of local information...

[SECURITY] [DLA 3470-1] owslib security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3470-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk June 25, 2023 https://wiki.debian.org/LTS -...