CVE-2022-3085

Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to a stack-based buffer overflow which may allow an attacker to execute arbitrary code...

CVE-2022-3085

Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to a stack-based buffer overflow which may allow an attacker to execute arbitrary code...

Stack overflow

Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to a stack-based buffer overflow which may allow an attacker to execute arbitrary code...

CVE-2022-3085

Fuji Electric Tellus Lite V-Simulator (versions 4.0.12.0 and prior) is affected by CVE-2022-3085: a stack-based buffer overflow in the software that may allow an attacker to execute arbitrary code. The vulnerability is locally exploitable (attack vector: local; user interaction required) with a C...

CVE-2022-3085

Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to a stack-based buffer overflow which may allow an attacker to execute arbitrary code...

Restore or Failback to Server 2022 Hyper-V host fails with "Unable to update VM security descriptor Error"

Article Applicability This article is specific to an error that occurs when attempting to restore or failback to a Hyper-V host running Windows Server 2022 or versions 2004 and 20H2 of the Semi-Annual Channel versions of Windows Server. This article addresses an issue that is mentioned in the Vee...

GSD-2023-1001034 x86/hyperv: Remove unregister syscore call from Hyper-V cleanup

x86/hyperv: Remove unregister syscore call from Hyper-V cleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000679 RISC-V: Align the shadow stack

RISC-V: Align the shadow stack This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit 7a270e44c9a9bd046742451e89a2abd93d96a79b, it wa...

GSD-2023-1000451 RISC-V: kexec: Fix memory leak of fdt buffer

RISC-V: kexec: Fix memory leak of fdt buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000450 RISC-V: kexec: Fix memory leak of elf header buffer

RISC-V: kexec: Fix memory leak of elf header buffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000165 riscv: Sync efi page table's kernel mappings before switching

riscv: Sync efi page table's kernel mappings before switching This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.82 by commit...

GSD-2023-1000163 riscv: fix race when vmap stack overflow

riscv: fix race when vmap stack overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.82 by commit...

GSD-2023-1000067 riscv: fix race when vmap stack overflow

riscv: fix race when vmap stack overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

This Week in Spring - January 17th, 2023

Hi, Spring fans! Welcome to another installment of This Week in Spring! I went to Helsinki, Finland, last week, and this week Im in Atlanta, Georgia, to speak at the Atlanta Java User Group. And, of course, next week, Ill be in New York to join a viewing party for the airing of SpringOne...

CVE-2022-3087

Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code...

CVE-2022-3087

Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code...

Out-of-bounds

Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code...

PT-2023-33528 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v6.0.17 Description: A memory leak issue was discovered in the kexec functionality of the RISC-V architecture in the Linux Kernel. The issue was introduced in version v5.19 and fixed in version v6.0.18. The...

PT-2023-33527 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: A memory leak issue has been identified, related to the elf header buffer in kexec for RISC-V. The actual impact and potential for attack have not been fully determined. Recommendations: For...

PT-2023-33687 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the removal of an unregister syscore call from Hyper-V cleanup in the x86/hyperv component. The actual impact and attack plausibility have not yet been proven...