CVE-2023-31131 Arbitrary File Write when Extracting Tarballs in greenplum-db

Greenplum Database GPDB is an open source data warehouse based on PostgreSQL. In versions prior to 6.22.3 Greenplum Database used an unsafe methods to extract tar files within GPPKGs. greenplum-db is vulnerable to path traversal leading to arbitrary file writes. An attacker can use this...

Advisory ROSA-SA-2023-2164

Software: unbound 1.16.2 OS: ROSA Virtualization 2.1 packageevrstring: unbound-1.16.2-2.rv3.src.rpm CVE-ID: CVE-2019-25038 BDU-ID: None CVE-Crit: CRITICAL CVE-DESC: Unbound before version 1.9.5 allows integer overflow on size calculation in dnscrypt/dnscrypt.c. CVE-STATUS: Fixed CVE-REV: Run the...

Advisory ROSA-SA-2023-2163

Software: unbound 1.16.2 OS: ROSA Virtualization 2.1 packageevrstring: unbound-1.16.2-2.rv3.src.rpm CVE-ID: CVE-2019-25032 BDU-ID: None CVE-Crit: CRITICAL CVE-DESC: Unbound before 1.9.5 allows integer overflow in the regional allocator via regionalalloc. CVE-STATUS: Fixed CVE-REV: Run the yum...

MediaTek 芯片缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the preloader module of the MediaTek chips, which is caused by a lack of boundary checking and may allow out-of-bounds writes...

MediaTek 芯片输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the m4u module of the MediaTek chips, which arises from incorrect input validation and possible out-of-bounds writes...

MediaTek 芯片缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the preloader module of the MediaTek chips, which is caused by a lack of boundary checking and may allow out-of-bounds writes...

MediaTek 芯片缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the preloader module of the MediaTek chips, which is caused by a lack of boundary checking and may allow out-of-bounds writes...

MediaTek 芯片输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the ril module of the MediaTek chips, which is caused by a lack of boundary checking and may allow out-of-bounds writes...

MediaTek 芯片缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the adsp module of the MediaTek chips, which stems from a lack of boundary checking and may allow out-of-bounds writes...

PT-2023-7471

Name of the Vulnerable Software and Affected Versions Greenplum Database versions prior to 6.22.3 Description The issue is related to the Greenplum Database using unsafe methods to extract tar files within GPPKGs, leading to path traversal and arbitrary file writes. An attacker can exploit this t...

CVE-2023-31131: Improper Limitation of a Pathname to a Restricted Directory

Greenplum Database GPDB is an open source data warehouse based on PostgreSQL. In versions prior to 6.22.3 Greenplum Database used an unsafe methods to extract tar files within GPPKGs. greenplum-db is vulnerable to path traversal leading to arbitrary file writes. An attacker can use this...

AlmaLinux 9 : device-mapper-multipath (ALSA-2023:2459)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:2459 advisory. - multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to...

RHEL 9 : git (RHSA-2023:2319)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2319 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a...

SUSE: Security Advisory (SUSE-SU-2023:2171-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2023-2455

Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and a given query is planned under one role and then executed under other roles. This scenario can happen under security...

SUSE-SU-2023:2171-1 Security update for ntp

This update for ntp fixes the following issues: Fixed multiple out of bound writes: CVE-2023-26551 bsc1210386, CVE-2023-26552 bsc1210388, CVE-2023-26553 bsc1210387, CVE-2023-26554 bsc1210389...

SUSE-SU-2023:2142-1 Security update for ntp

This update for ntp fixes the following issues: Fixed multiple out of bound writes: CVE-2023-26551 bsc1210386, CVE-2023-26552 bsc1210388, CVE-2023-26553 bsc1210387, CVE-2023-26554 bsc1210389...

git: git shell function that splits command arguments can lead to arbitrary heap writes.

Git is an open source, scalable, distributed revision control system. git shell is a restricted login shell that can be used to implement Git's push/pull functionality via SSH. In versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4, the function that splits the...

UNISOC Chipsets 缓冲区错误漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in the UNISOC Chipsets apipe driver module, which stems from a lack of boundary checking, leading to out-of-bounds writes...

UNISOC Chipsets 缓冲区错误漏洞

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC Chipsets bootcp service module, which is caused by a lack of boundary checking, leading to out-of-bounds writes...