SUSE CVE-2020-13132

An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free in the ykpivutilgeneratekey function in lib/util.c through incorrect error handling code. This could be used to cause a denial of service attack...

SUSE CVE-2020-14342

It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges...

SUSE CVE-2021-29425

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above thus "limited" path traversal,...

SUSE CVE-2021-32547

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-lts package apport hooks, it could expose private data to other local users...

SUSE CVE-2022-3821

An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in formattimespan, leading to a Denial of Service...

SUSE CVE-2022-23639

crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to version 0.8.7 incorrectly assumed that the alignment of i,u64 was always the same as AtomicI,U64. However, the alignment of i,u64 on a...

SUSE CVE-2022-27239

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges...

CVE-2022-47977

A vulnerability has been identified in JT Open All versions V11.2.3.0, JT Utilities All versions V13.2.3.0. The affected application contains a memory corruption vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current...

CVE-2022-47936

A vulnerability has been identified in JT Open All versions V11.2.3.0, JT Utilities All versions V13.2.3.0, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Parasolid V35.1 All versions V35.1.150. The affected application...

CVE-2022-47936

A vulnerability has been identified in JT Open All versions V11.2.3.0, JT Utilities All versions V13.2.3.0, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Parasolid V35.1 All versions V35.1.150. The affected application...

CVE-2022-47977

A vulnerability has been identified in JT Open All versions V11.2.3.0, JT Utilities All versions V13.2.3.0. The affected application contains a memory corruption vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current...

Memory corruption

A vulnerability has been identified in JT Open All versions V11.2.3.0, JT Utilities All versions V13.2.3.0. The affected application contains a memory corruption vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current...

Stack overflow

A vulnerability has been identified in JT Open All versions V11.2.3.0, JT Utilities All versions V13.2.3.0, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Parasolid V35.1 All versions V35.1.150. The affected application...

CVE-2022-47977

CVE-2022-47977 affects Siemens JT Open Toolkit (all versions before 11.2.3.0) and JT Utilities (all versions before 13.2.3.0). The issue is a memory corruption vulnerability encountered while parsing specially crafted JT files, which could allow code execution in the context of the current proces...

CVE-2022-47977

A vulnerability has been identified in JT Open All versions V11.2.3.0, JT Utilities All versions V13.2.3.0. The affected application contains a memory corruption vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current...

CVE-2022-47977

A vulnerability has been identified in JT Open All versions V11.2.3.0, JT Utilities All versions V13.2.3.0. The affected application contains a memory corruption vulnerability while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current...

CVE-2022-47936

Siemens JT Open Toolkit, JT Utilities, and Parasolid are affected by a stack-based overflow while parsing specially crafted JT files. Affected versions: JT Open <11.2.3.0, JT Utilities <13.2.3.0, Parasolid <34.0.252 (V34.0), <34.1.242 (V34.1), <35.0.170 (V35.0),

CVE-2022-47936

A vulnerability has been identified in JT Open All versions V11.2.3.0, JT Utilities All versions V13.2.3.0, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Parasolid V35.1 All versions V35.1.150. The affected application...

CVE-2022-47936

A vulnerability has been identified in JT Open All versions V11.2.3.0, JT Utilities All versions V13.2.3.0, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Parasolid V35.1 All versions V35.1.150. The affected application...

PT-2023-15541 · Jt Open +1 · Jt Open +1

Name of the Vulnerable Software and Affected Versions: JT Open versions prior to 11.2.3.0 JT Utilities versions prior to 13.2.3.0 Description: A memory corruption issue has been identified in the affected application when parsing specially crafted JT files. This could allow an attacker to execute...