CVE-2022-21983

CVE-2022-21983 is a Win32 Stream Enumeration Remote Code Execution vulnerability. The connected sources show an in-scope CVE with a network attack vector and high impact: CVSSv3.1 base score 7.5 (HIGH), with no authentication (NONE) and user interaction required (REQUIRED); confidentiality, integ...

CVE-2022-21983 Win32 Stream Enumeration Remote Code Execution Vulnerability

...

Melody - A Transparent Internet Sensor Built For Threat Intelligence

Melody Monitor the Internet's background noise Melody is a transparent internet sensor built for threat intelligence and supported by a detection rule framework which allows you to tag packets of interest for further analysis and threat monitoring. Features Here are some key features of Melody :...

OESA-2022-1611 flac security update

FLAC stands for Free Lossless Audio Codec, an audio format similar to MP3, but lossless, meaning that audio is compressed in FLAC without any loss in quality. Security Fixes: In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check...

Win32 Stream Enumeration Remote Code Execution Vulnerability

...

Win32 Stream Enumeration Remote Code Execution Vulnerability

...

KLA12502 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...

PT-2022-2871 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Win32 Stream Enumeration component of Windows operating systems. It allows remote attackers to execute arbitrary code and...

PT-2022-2844 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Win32 Stream Enumeration component of Windows operating systems. This allows a remote attacker to execute arbitrary code...

PT-2022-2872 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Win32 Stream Enumeration component of Windows operating systems. This allows remote attackers to execute arbitrary code a...

Buffer Overflow

Live555 is vulnerable to buffer overflow. The vulnerability exists because huge requests for the same MP3 stream, lead to recursion and s stack-based buffer over-read which allows an attacker to cause a denial of service...

DEBIAN-CVE-2022-0798

Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

多款Qualcomm产品配置错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time fabricated on the surface of semiconductor wafers. Qualcomm A misconfiguration vulnerability exists in multiple products,...

[SECURITY] Fedora 36 Update: expat-2.4.7-1.fc36

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

CVE-2022-0322

A flaw was found in the sctpmakestrresetreq function in net/sctp/smmakechunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUGON issue, leading to a denial of service DOS...

[SECURITY] Fedora 35 Update: expat-2.4.7-1.fc35

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Difficult to exploit vulnerabili...

OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Difficult to exploit vulnerabili...

Denial Of Service (DoS)

bind is vulnerable to denial of service. The vulnerability exists due to a race condition where an attacker can cause the system to remain in CLOSEWAIT status for an indefinite period of time by injecting a maliciously crafted TCP stream...

CVE-2022-0396

A flaw was found in Bind that incorrectly handles certain crafted TCP streams. The vulnerability allows TCP connection slots to be consumed for an indefinite time frame via a specifically crafted TCP stream sent from a client. This flaw allows a remote attacker to send specially crafted TCP strea...