CVE-2022-22657

A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution...

CVE-2022-22657

CVE-2022-22657 is a memory initialization issue that Apple fixed in Logic Pro 10.7.3, GarageBand 10.4.6, and macOS Monterey 12.3. The Apple advisories indicate this issue affects MIDI handling (Memory initialization) and could cause opening a maliciously crafted file to terminate the application ...

CVE-2022-22633

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution...

CVE-2022-22626

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process...

CVE-2022-22607

CVE-2022-22607 describes an out-of-bounds read in Apple Xcode. The issue is mitigated by improved bounds checking and is fixed in Xcode 13.3. Impact per sources: opening a maliciously crafted file may cause unexpected termination or arbitrary code execution. Remediation: update to Xcode 13.3 or l...

CVE-2022-22605

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution...

CVE-2022-22603

CVE-2022-22603 affects Apple Xcode’s otool component. A boundary check vulnerability (out-of-bounds read) can be triggered by opening a maliciously crafted file, potentially causing an application termination or arbitrary code execution. Apple’s remedy is patching in Xcode 13.3. The available doc...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current bind Multiple Vulnerabilities (SSA:2022-076-01)

The version of bind installed on the remote host is prior to 9.11.37 / 9.18.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-076-01 advisory. - BIND 9.16.11 - 9.16.26, 9.17.0 - 9.18.0 and versions 9.16.11-S1 - 9.16.26-S1 of the BIND Supported Preview Edition...

expat: Integer overflow in doProlog in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

CVE-2022-0635

Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion check...

Apple Xcode out-of-bounds read vulnerability

Apple Xcode is an integrated development environment provided by Apple, Inc. for developers to develop applications for Mac OS X and iOS. A remote attacker could use this vulnerability to cause an application to terminate unexpectedly or execute arbitrary code via a maliciously crafted file...

PT-2022-15582 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 8.5 iOS versions prior to 15.4 iPadOS versions prior to 15.4 macOS Big Sur versions prior to 11.6.5 macOS Monterey versions prior to 12.3 Description: A memory corruption issue was addressed with improved state...

About the security content of watchOS 8.5

About the security content of watchOS 8.5 This document describes the security content of watchOS 8.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

PT-2022-15599 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.3 Description: An out-of-bounds write issue was addressed with improved bounds checking. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory. Recommendations: For versions...

PT-2022-15577 · Apple · Applescript +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.5 macOS versions prior to 12.3 Security Update versions prior to 2022-003 Catalina Description: An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafted AppleScript...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A buffer error vulnerability exists in Apple macOS Big Sur prior to 11.6.5, which stems from the fact that processing a maliciously crafted AppleScript binary may result in an unexpected application termination or process memory...

About the security content of macOS Big Sur 11.6.5

About the security content of macOS Big Sur 11.6.5 This document describes the security content of macOS Big Sur 11.6.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.

...

expat: Integer overflow in defineAttribute in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

How to Automate Offboarding to Keep Your Company Safe

In the midst of 'The Great Resignation,' the damage from employees or contractors leaving an organization might be one of the greatest risks facing IT teams today. The reality is that in the busy enterprise computing environment, user onboarding and offboarding is a fact of daily life. When...