Security Bulletin: Vulnerabilities in OpenSSL affect multiple N series products

Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. OpenSSL is used by multiple N series products. Multiple N series products have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-1788 DESCRIPTION: OpenSSL is vulnerable to a denial of servic...

MGASA-2021-0544 Updated gmp packages fix security vulnerability

Integer overflow in mpz/inpraw.c and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms...

Updated gmp packages fix security vulnerability

Integer overflow in mpz/inpraw.c and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms...

The vulnerability of the Azure RTOS, related to deficiencies in the system’s controlled area segmentation, allows a intruder to gain unauthorized access to the device.

The vulnerability of the Azure RTOS is related to deficiencies in the segmentation of the system’s controlled area. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the device...

SUSE SLED15: gmp-devel / gmp-devel-32bit / libgmp10 / libgmp10-32bit / libgmpxx4 / etc (SUSE-SU-2021:3946-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3946-1 advisory. - CVE-2021-43618: Fixed buffer overflow via crafted input in mpz/inpraw.c bsc1192717. Tenable has extracted the preceding description block...

The vulnerability of the Azure RTOS, related to deficiencies in the system’s controlled area segmentation, allows a intruder to gain unauthorized access to the device.

The vulnerability of the Azure RTOS is related to deficiencies in the segmentation of the system’s controlled area. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the device...

SUSE SLES15: libnetcdf-gnu-hpc / libnetcdf-gnu-mpich-hpc / etc (SUSE-SU-2021:3873-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3873-1 advisory. - Fixed multiple vulnerabilities in ezXML: CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202, CVE-2019-20199, CVE-2019-20200,...

openSUSE 15 Security Update : netcdf (openSUSE-SU-2021:3873-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3873-1 advisory. - An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memo...

CVE-2020-36134

AOM v2.0.1 was discovered to contain a segmentation violation via the component aomdsp/x86/obmcsadavx2.c...

CVE-2020-36134

AOM v2.0.1 was discovered to contain a segmentation violation via the component aomdsp/x86/obmcsadavx2.c...

CVE-2020-36134

AOM v2.0.1 was discovered to contain a segmentation violation via the component aomdsp/x86/obmcsadavx2.c...

Design/Logic Flaw

AOM v2.0.1 was discovered to contain a segmentation violation via the component aomdsp/x86/obmcsadavx2.c...

Aom 缓冲区错误漏洞

Aom is a next-generation open-source digital media technology for everyone, organized by the Alliance For Open Media USA. A security vulnerability exists in AOM version 2.0.1, which stems from a segmentation violation in the component aomdsp/x86/obmcsadavx2.c. The vulnerability is caused by the...

PT-2021-11924 · Aom · Aom

Name of the Vulnerable Software and Affected Versions: AOM version 2.0.1 Description: The issue is related to a segmentation violation in the component aom dsp/x86/obmc sad avx2.c. Recommendations: For AOM version 2.0.1, consider restricting access to the vulnerable component aom dsp/x86/obmc sad...

CVE-2020-36134

CVE-2020-36134 affects AOM v2.0.1 with a segmentation violation in aom_dsp/x86/obmc_sad_avx2.c. The vulnerability is cited in GLSA-202401-32 (libaom: Multiple Vulnerabilities). Remediation guidance in the connected Gentoo advisory advises upgrading to libaom >= 3.2.0. The provided documents do...

CVE-2020-36134

AOM v2.0.1 was discovered to contain a segmentation violation via the component aomdsp/x86/obmcsadavx2.c...

CVE-2020-36134

AOM v2.0.1 was discovered to contain a segmentation violation via the component aomdsp/x86/obmcsadavx2.c...

SUSE SLES15: libnetcdf-gnu-hpc / libnetcdf-gnu-mpich-hpc / etc (SUSE-SU-2021:3815-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3815-1 advisory. - Fixed multiple vulnerabilities in ezXML: CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202, CVE-2019-20199, CVE-2019-20200,...

This shouldn't have happened: A vulnerability postmortem

Posted by Tavis Ormandy, Project Zero Introduction This is an unusual blog post. I normally write posts to highlight some hidden attack surface or interesting complex vulnerability class. This time, I want to talk about a vulnerability that is neither of those things. The striking thing about thi...

Critical Wormable Security Flaw Found in Several HP Printer Models

Cybersecurity researchers on Tuesday disclosed eight-year-old security flaws affecting 150 different multifunction printers MFPs from HP Inc that could be potentially abused by an adversary to take control of vulnerable devices, pilfer sensitive information, and infiltrate enterprise networks to...