K12201527: Overview of F5 security notifications

Security Advisory Description F5 is making two changes to our approach going forward: hardened releases are moving to a six-week cadence, and we are pausing regular security notifications. For more information, please see this blog: Our first hardened release cycle: What we learned and how we’re...

CVE-2022-44109

pdftojson commit 94204bb was discovered to contain a stack overflow via the component Stream::makeFilterchar, Stream, Object, int...

CVE-2022-44109

CVE-2022-44109 affects pdftojson with commit 94204bb, where a stack overflow occurs in Stream::makeFilter(char*, Stream*, Object*, int). Public CVSSv3.1 metrics rate exploitation as network-based with high impact (C/I/A: HIGH) and a base score of 9.8. No remediation or patch details are provided ...

pdftojson 缓冲区错误漏洞

pdftojson is Johnson Liang open source a pdftotext wrapper . Use bounding box data to generate JSON. pdftojson 94204bb version of a security vulnerability , the vulnerability stems from the component Stream::makeFilterchar, Stream, Object, int there is a stack overflow...

CVE-2022-44109

pdftojson commit 94204bb was discovered to contain a stack overflow via the component Stream::makeFilterchar, Stream, Object, int...

CVE-2022-44109

pdftojson commit 94204bb was discovered to contain a stack overflow via the component Stream::makeFilterchar, Stream, Object, int...

[SECURITY] Fedora 37 Update: wireshark-4.0.2-1.fc37

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

SOUND4 IMPACT/FIRST/PULSE/Eco 2.x Radio Steam Disclosure

SOUND4 IMPACT/FIRST/PULSE/Eco =2.x Unauthenticated Radio Stream Disclosure Vendor: SOUND4 Ltd. Product web page: https://www.sound4.com | https://www.sound4.biz Affected version: FM/HD Radio Processing: Impact/Pulse/First Version 2: 1.1/2.15 Impact/Pulse/First Version 1: 2.1/1.69 Impact/Pulse Eco...

SOUND4 IMPACT/FIRST/PULSE/Eco 2.x Disconnect Webmonitor User Denial Of Service

SOUND4 IMPACT/FIRST/PULSE/Eco =2.x Disconnect Webmonitor User DoS Vendor: SOUND4 Ltd. Product web page: https://www.sound4.com | https://www.sound4.biz Affected version: FM/HD Radio Processing: Impact/Pulse/First Version 2: 1.1/2.15 Impact/Pulse/First Version 1: 2.1/1.69 Impact/Pulse Eco 1.16 Voi...

SOUND4 IMPACT/FIRST/PULSE/Eco 2.x Cross Site Request Forgery

SOUND4 IMPACT/FIRST/PULSE/Eco =2.x Cross-Site Request Forgery Vendor: SOUND4 Ltd. Product web page: https://www.sound4.com | https://www.sound4.biz Affected version: FM/HD Radio Processing: Impact/Pulse/First Version 2: 1.1/2.15 Impact/Pulse/First Version 1: 2.1/1.69 Impact/Pulse Eco 1.16 Voice...

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Disconnect Webmonitor User (DoS)

Summary The SOUND4 IMPACT introduces an innovative process - mono and stereo parts of the signal are processed separately to obtain perfect consistency in terms of both sound and level. Therefore, in moving reception, when the FM receiver switches from stereo to mono and back to stereo, the sound...

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Unauthenticated Radio Stream Disclosure

Summary The SOUND4 IMPACT introduces an innovative process - mono and stereo parts of the signal are processed separately to obtain perfect consistency in terms of both sound and level. Therefore, in moving reception, when the FM receiver switches from stereo to mono and back to stereo, the sound...

Mozilla: Use-after-free in InputStream implementation

The Mozilla Foundation Security Advisory describes this flaw as: Freeing arbitrary nsIInputStream's on a different thread than creation could have led to a use-after-free and potentially exploitable crash...

containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak

...

SUSE SLES12 Security Update : containerd (SUSE-SU-2022:4409-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4409-1 advisory. Update to containerd v1.6.12 including Docker v20.10.21-ce bsc1206065. Also includes the following fix: - CVE-2022-23471: host memo...

The vulnerability of the VNC module of the Media Player VLC allows a hacker to execute arbitrary code on the target system.

The vulnerability of the VNC media player VLC is related to a boundary error during the playback of a malicious URL address within the VNC module. Exploiting this vulnerability allows an attacker to remotely trick the victim into opening a specially created stream, causing memory corruption and...

PT-2022-36061 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: The issue is related to a warning in sk stream kill queues. It was introduced in version v5.18 and fixed in version v6.0.9. The actual impact and attack plausibility have not yet been proven...

CVE-2022-23471

containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, f...

PT-2022-36435 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.4.189 through 5.4.224 Description: The issue is related to a warning in sk stream kill queues in the Linux Kernel. It was introduced in version v5.4.189 and fixed in version v5.4.225. The actual impact and attack...

UBUNTU-CVE-2022-23471

containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, f...