GStreamer 安全漏洞

GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A security vulnerability exists in GStreamer that stems from an uninitialized stack variable vulnerability found in the gstmatroskademuxaddwvpkheader function in matroska-demux.c. The vulnerability is...

Important: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm CVE-2023-45290 go/parser: golang: Calling any of the...

The vulnerability of the H5E_printf_stack() function in the H5Eint.c file of the HDF5 library allows a attacker to disclose protected information.

The vulnerability of the H5Eprintfstack function in the H5Eint.c file of the HDF5 library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this function...

KB5043083: Windows 10 LTS 1507 Security Update (September 2024)

The remote Windows host is missing security update 5043083. It is, therefore, affected by multiple vulnerabilities - Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507 initial...

The vulnerability of Xerox WorkCentre 7220 microprogrammed software, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of Xerox WorkCentre 7220 microprogrammed software is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

CVE-2024-6874 macidn punycode buffer overread

libcurl's URL API function curlurlget offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exact...

edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message

A vulnerability has been identified in the NetworkPkg IP stack of EDK2, the open-source reference implementation of the UEFI specification. This flaw enables an unauthenticated attacker within the same network vicinity to transmit a specifically crafted DHCPv6 message. Exploiting this vulnerabili...

The vulnerability of the System Recovery Bootloader for Windows operating systems allows a hacker to bypass existing security restrictions and execute arbitrary code.

The vulnerability of the System Recovery Bootloader for Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions and execute arbitrary code...

Tenda AC10U fromWizardHandle method stack buffer overflow vulnerability

Tenda AC10U is a dual-band Gigabit wireless router from Tenda Technology, designed for 200 megabit and above fiber optic homes, supporting 802.11ac dual-band technology 2.4GHz and 5GHz, with a theoretical WiFi rate of up to 867Mbps. The Tenda AC10U suffers from a stack buffer overflow vulnerabili...

The vulnerability of the web interface of Tp-Link AC1350 wireless access points allows a hacker to trigger a service failure.

The vulnerability of the web interface of Tp-Link AC1350 wireless access points is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially crafted HTTP POST request...

The vulnerability of the ICMP and ICMPv6 analysis functions of the protocol generator stack used in uC/OS and uC/TCP-IP allows a attacker to cause service interruptions.

The vulnerability of the ICMP and ICMPv6 analysis functions of the ISN stack generator used in uC/OS and uC/TCP-IP is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service failures...

CVE-2024-21502

CVE-2024-21502 affects the fastecdsa library prior to 2.3.2. The root cause is a Use of Uninitialized Variable on the stack in the curvemath_mul function (src/curveMath.c), where a value is interpreted as a user-defined type. Depending on the value, an attacker-controlled stack can cause arbitrar...

CVE-2024-21502

Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemathmul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free, arbitrary...

CVE-2024-21502

Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemathmul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free, arbitrary...

PT-2023-31891 · Unknown · Bacnet Stack

Name of the Vulnerable Software and Affected Versions: BACnet Stack versions prior to 1.3.2 Description: The issue is related to a decode function APDU buffer over-read in the bacapp decode application data function in bacapp.c. This over-read occurs in versions of the BACnet Stack before 1.3.2...

EUVD-2023-58447

Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF...

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the use of an uninitialized pointer on the stack, allowing a malicious actor to execute arbitrary code within the context of the current process.

The vulnerability of the Siemens Solid Edge design and simulation tools is related to the use of an uninitialized pointer on the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of the current process, through the use of specially created P...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created USDA file...

Ubuntu: Security Advisory (USN-6444-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Red Hat openshift-logging LokiStack 安全漏洞

Red Hat openshift-logging LokiStack is a platform component of Red Hat, Inc. A security vulnerability exists in Red Hat openshift-logging LokiStack, which stems from the fact that the key used for caching is just a token, allowing a user to perform other actions...