Most recent entries from all

bdu:2024-07256

certfr-2024-avi-0585 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq…

certfr-2024-avi-0585

EUVD-2026-259296

fkie_cve-2023-50495

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

GHSA-8p5h-3mcg-frjf

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

gsd-2023-50495

ICSA-23-166-11 — Siemens SIMATIC S7-1500 TM MFP Linux Kernel

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability. A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS. When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds. In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM inst…

msrc_CVE-2023-50495 — NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

msrc_CVE-2023-50495

OESA-2023-1969 — ncurses security update

Affected: openEuler:20.03-LTS-SP1: ncurses, openEuler:20.03-LTS-SP3: ncurses, openEuler:20.03-LTS-SP4: ncurses, openEuler:22.03-LTS: ncurses, openEuler:22.03-LTS-SP1: ncurses, openEuler:22.03-LTS-SP2: ncurses

The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses. Security Fix(es): NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().(CVE-2023-50495)

SUSE-SU-2023:4892-1 — Security update for ncurses

Security update for ncurses

UBUNTU-CVE-2023-50495

Affected: Ubuntu:Pro:14.04:LTS: ncurses, Ubuntu:Pro:16.04:LTS: ncurses, Ubuntu:Pro:18.04:LTS: ncurses, Ubuntu:Pro:20.04:LTS: ncurses, Ubuntu:22.04:LTS: ncurses

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

WID-SEC-W-2024-0165 — NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager ausnutzen, um einen Denial of Service Angriff durchzuführen.