RUSTSEC-2022-0063 Multiple vulnerabilities resulting in out-of-bounds writes

The heap initialization methods were missing a minimum size check for the given heap size argument. This could lead to out-of-bound writes when a heap was initialized with a size smaller than 3 sizeof:: because of metadata write operations. When calling Heap::extend with a size smaller than two...

Multiple vulnerabilities resulting in out-of-bounds writes

The heap initialization methods were missing a minimum size check for the given heap size argument. This could lead to out-of-bound writes when a heap was initialized with a size smaller than 3 sizeof:: because of metadata write operations. When calling Heap::extend with a size smaller than two...

MediaTek Apusys 缓冲区错误漏洞

MediaTek Apusys is a chipset from MediaTek, a Chinese company. A security vulnerability exists in MediaTek Apusys that stems from a lack of boundary checking and out-of-scope writes. This could result in a local privilege escalation that requires system execution privileges...

Buffer Overflow

vim is vulnerable to heap-based buffer overflow. The vulnerability exists in the latinptr2len function in src/mbyte.c due to lack of validation memory access, allowing an attacker to perform arbitrary out of bound writes...

Dell Command Integration Suite for System Center 路径遍历漏洞

Dell Command Integration Suite for System Center is an easy-to-use GUI-based tool from Dell Dell. It is used to configure and deploy your Dell client system. A security vulnerability exists in Dell Command Integration Suite for System Center versions prior to 6.2.0, which can be exploited by an...

MGASA-2022-0302 Updated rsync packages fix security vulnerability

An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers. The server chooses which files/directories are sent to the client. However, the rsync client performs insufficient validation of file names. A...

CVE-2022-32742

A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file or printer instead of client-supplied data. The client cannot control the area of the...

FATEK FvDesigner 缓冲区错误漏洞

The FATEK FvDesigner is a hardware device from the Chinese company Yonghong Electric FATEK. It provides a human-machine interface. A buffer error vulnerability exists in FATEK FvDesigner 1.5.103 and earlier versions, which stems from vulnerability to out-of-bounds writes and can be exploited by a...

rsync: remote arbitrary files write inside the directories of connecting peers

A flaw was found in rsync that is triggered by a victim rsync user/client connecting to a malicious rsync server. The server can copy and overwrite arbitrary files in the client's rsync target directory and subdirectories. This flaw allows a malicious server, or in some cases, another attacker wh...

CVE-2022-2964

A flaw was found in the Linux kernel’s driver for the ASIX AX88179178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes. Mitigation Mitigation for this issue is either not available or the currently available...

Linux kernel 数字错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A numeric error vulnerability exists in the Linux kernel that stems from an integer coercion error found in the openvswitch kernel module. Given enough operations, the...

Buffer Overflow

u-boot is vulnerable to buffer overflow. The vulnerability exists because the hole descriptor overwrite in U-Boot IP Packet Defragmentation which allows an attacker to perform arbitrary out of bound writes...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service.The vulnerability exists ingetcropfffsets function intiffcrop.c,which allows an attacker to send crafted file leading to out of bound reads and writes...

Adobe Acrobat Reader DC 缓冲区错误漏洞

Adobe Acrobat Reader DC is the United States of America Audobee Adobe company of a Pdf reading tool. It is used to reliably view, print and annotate Pdf documents. A buffer error vulnerability exists in Adobe Acrobat Reader DC, which arises from performing operations in memory without properly...

GHSA-4696-G7JJ-XG2H Mapbox is vulnerable to Integer Overflow

An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. The overflow is caused by large image height and width values when creating a new Image and allows for out of bounds...

httpd security update

2.2.15-69.0.5 - handle large writes in aprputs CVE-2022-28614Orabug: 34317854...

LibTIFF 数字错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A numeric error vulnerability exists in the LibTIFF tiffcrop utility, which stems from having a uint32t underflow, which can lead to...

CVE-2022-38216

An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. The overflow is caused by large image height and width values when creating a new Image and allows for out of bounds...

Integer overflow

An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. The overflow is caused by large image height and width values when creating a new Image and allows for out of bounds...

CVE-2022-38216

Summary: CVE-2022-38216 reports an integer overflow in Mapbox’s closed‑source gl-native library prior to v10.6.1, bundled with multiple Mapbox products. The overflow is triggered by large image height/width values when creating a new Image and can cause out‑of‑bounds writes, potentially crashing ...