18201 matches found
CVE-2020-10064 Improper Input Frame Validation in ieee802154 Processing
Improper Input Frame Validation in ieee802154 Processing. Zephyr versions = v1.14.2, = v2.2.0 contain Stack-based Buffer Overflow CWE-121, Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7...
CVE-2020-10064
Improper Input Frame Validation in ieee802154 Processing. Zephyr versions = v1.14.2, = v2.2.0 contain Stack-based Buffer Overflow CWE-121, Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7...
Trend Micro, Inc. Home Network Security tdts.ko chrdev_ioctl_handle privilege escalation vulnerability
Summary A privilege escalation vulnerability exists in the tdts.ko chrdevioctlhandle functionality of Trend Micro, Inc. Home Network Security 6.1.567. A specially crafted ioctl can lead to increased privileges. An attacker can issue an ioctl to trigger this vulnerability. Tested Versions Trend...
PT-2021-9137
Name of the Vulnerable Software and Affected Versions Zephyr versions = v1.14.2, = v2.2.0 Description The issue is related to improper input frame validation in ieee802154 processing, which can lead to stack-based and heap-based buffer overflows. Recommendations For Zephyr versions = v1.14.2, =...
CVE-2020-10064: Stack-based Buffer Overflow
Improper Input Frame Validation in ieee802154 Processing. Zephyr versions = v1.14.2, = v2.2.0 contain Stack-based Buffer Overflow CWE-121, Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7...
Trend Micro Inc. Home Network Security tdts.ko chrdev_ioctl_handle privilege escalation vulnerability
Summary A privilege escalation vulnerability exists in the tdts.ko chrdevioctlhandle functionality of Trend Micro, Inc. Home Network Security 6.1.567. A specially crafted ioctl can lead to code execution. An attacker can issue an ioctl to trigger this vulnerability. Tested Versions Trend Micro,...
PT-2021-9658
Name of the Vulnerable Software and Affected Versions Zephyr versions = v1.14.2, = v2.3.0 Description A buffer overflow issue occurs when Long File Names are enabled in FAT FS and the fs stat function is called, resulting in a stack-based buffer overflow. Recommendations For Zephyr versions =...
CVE-2020-13598: Stack-based Buffer Overflow
FS: Buffer Overflow when enabling Long File Names in FATFS and calling fsstat. Zephyr versions = v1.14.2, = v2.3.0 contain Stack-based Buffer Overflow CWE-121. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7fhv-rgxr-x56h...
RHEL 8 : python27:2.7 (RHSA-2021:1761)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1761 advisory. Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic...
CentOS 8 : python3 (CESA-2021:1633)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1633 advisory. - python: CRLF injection via HTTP request method in httplib/http.client CVE-2020-26116 - python: Unsafe use of eval on data retrieved via HTTP in the...
Moderate: Red Hat Security Advisory: python3 security update
An update for python3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2020-23851
FFJPEG is affected by a stack-based buffer overflow in the jfif_decode(void *ctxt, BMP *pb) function (ffjpeg/src/jfif.c:513:28) that could cause denial of service when processing specially crafted JPEGs. Affected versions are FFJPEG prior to 2020-07-02. Several sources reiterate this flaw (CVE-20...
Security Bulletin: A vulnerability in Java affects IBM Cloud Pak for Multicloud Management Monitoring
Summary Eclipse OpenJ9 is vulnerable to a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding. By sending an overly long string, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause th...
python38:3.8 security update
An update is available for python-psycopg2, python-PyMySQL, python-lxml, python3x-six, python-urllib3, PyYAML, python-jinja2, python-requests, modwsgi, python38, python-asn1crypto, python3x-pip, python-chardet, python-markupsafe, Cython, python-psutil, python-ply, babel, python-wheel,...
ALSA-2021:1761 Moderate: python27:2.7 security and bug fix update
Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for...
Moderate: python27:2.7 security and bug fix update
Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for...
CVE-2020-23851: Out-of-bounds Write
A stack-based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfifdecodevoid ctxt, BMP pb function at ffjpeg/src/jfif.c:513:28, which could cause a denial of service by submitting a malicious jpeg image...
ICSA-21-040-06_Siemens JT2Go and Teamcenter Visualization (Update A)
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: JT2Go and Teamcenter Visualization Vulnerabilities: Out-of-bounds Read, Improper Restriction of Operations within the Bounds of a Memory Buffer, Stack-based Buffer overflow, Out-of-Bounds Write, Type...
PT-2021-21107
Name of the Vulnerable Software and Affected Versions: KDE KImageFormats versions 5.70.0 through 5.81.0 Description: The issue is a stack-based buffer overflow in the XCFImageFormat::loadTileRLE function. Recommendations: For versions 5.70.0 through 5.81.0, update to a version that contains a fix...
