2816 matches found
CLSA-2024-1709562468 Fix CVE(s): CVE-2023-6004, CVE-2023-6918
SECURITY UPDATE: ProxyCommand/ProxyJump features allow injection of malicious code through hostname - debian/patches/CVE-2023-6004-pre1.patch: move common parser functions to configparser.c - debian/patches/CVE-2023-6004-pre2.patch: prevent possible segmentation fault -...
CVE-2023-43540 Buffer Copy Without Checking Size of Input in Bluetooth HOST
Memory corruption while processing the IOCTL FM HCI WRITE request...
CLSA-2024-1709547699 libssh: Fix of 2 CVEs
CVE-2023-6004: fix the possibility of injections through a hostname parameter in the ProxyCommand/ProxyJump features - CVE-2023-6918: fix the issue when unchecked return values for digests may cause DoS...
OESA-2024-1230 stb security update
Single-file public domain libraries for C/C++. Security Fixes: stbimage is a single file MIT licensed library for processing images. When stbisetflipverticallyonload is set to TRUE and reqcomp is set to a number that doesn’t match the real number of components per pixel, the library attempts to...
SUSE CVE-2024-0075
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user may cause a NULL-pointer dereference by accessing passed parameters the validity of which has not been checked. A successful exploit of this vulnerability may lead to denial of service and limited information...
Tenda AC9 fromSetSysTime function buffer overflow vulnerability
Tenda AC9 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in 2016. Tenda AC9 suffers from a buffer overflow vulnerability that stems from not checking the buffer input size, which can be exploited by an attacker to execute arbitrary code via the fromSetSysTime...
PT-2024-38409
Name of the Vulnerable Software and Affected Versions oFono affected versions not specified Description This issue allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit...
Tenda AC9 安全漏洞
Tenda AC9 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in 2016. Tenda AC9 suffers from a buffer overflow vulnerability that stems from not checking the buffer input size, which can be exploited by an attacker to execute arbitrary code via the fromSetSysTime...
The vulnerability of the log_blackbox.c component in the libqb library allows a hacker to execute arbitrary code.
The vulnerability of the logblackbox.c component in the libqb library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Stack-based Buffer Overflow
libzephyr.so is vulnerable to a Buffer Overflow. The vulnerability is due to an unchecked length coming from user input in settings shell, specifically during the handling of SETTINGSVALUESTRING type values, which can result in copying data of a length greater than the buffer size allocated for...
CVE-2023-6749 Unchecked user input length in the Zephyr Settings Shell
Unchecked length coming from user input in settings shell...
CVE-2023-6749 Unchecked user input length in the Zephyr Settings Shell
Unchecked length coming from user input in settings shell...
CVE-2023-6749 Unchecked user input length in the Zephyr Settings Shell
Unchecked length coming from user input in settings shell...
Huawei EMUI Security Vulnerability
Huawei EMUI is an Android-based mobile operating system developed by Chinese company Huawei. A security vulnerability exists in Huawei EMUI, which originates from an input data unchecked vulnerability in the cellular data module...
zephyr Security Breach
Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in zephyr 3.5 and earlier versions, which stems from the length of unchecked user input in Shell settings...
PT-2024-15077 · Zephyrproject Rtos +1 · Zephyr
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to an unchecked length coming from user input in the settings shell. This could potentially lead to exploitation. No specific details about affected devices or...
CVE-2022-23087
The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted. These include the insertion of IP and TCP checksums, insertion of an Ethernet VLAN header, and TCP segmentation offload "TSO". The e1000 device model uses an on-stack buffer to generat...
The vulnerability of the QuTS hero, QTS, and QuTScloud operating systems for network devices from Qnap occurs due to the copying of buffers without checking the size of the input data. This allows attackers to execute arbitrary code.
The vulnerability of the QuTS hero, QTS, and QuTScloud network devices from Qnap operating systems is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...