CVE Vulnerability Catalog

A vulnerability in elenavanengelenmaslova mocknest-serverless 0.9.0 affects an unknown function of the file deployment/aws/shared/github-oidc-role.yaml in the AWS GitHub OIDC Deployment Helper Script component. Manipulation leads to improper privilege management. The attack can be initiated remotely. The patch is named 6ab3147282d867c1993f995272750db091c2290b.

A vulnerability in vgmstream up to r2117 affects the add_entry function in src/meta/txtp_parser.c in the txtp component. Manipulation of range_start/range_end arguments leads to resource consumption. The attack can be performed remotely, and the exploit has been disclosed publicly. The patch is named 4b6a02dd1aff6428255db912563d77d4cb0a143e.

A weakness in vgmstream up to r2117 affects the sscanf function in src/meta/txth.c in the txth-txtp component. This manipulation causes stack-based buffer overflow. The attack can be carried out remotely, and the exploit has been made public. Patch name: 4669d37a6af94866f6f0628678f9f90d46954e8b.

A vulnerability in java-json-tools jackson-coreutils 2.0 affects the TreePointer.tokensFromInput function in src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java in the JSON Pointer parser component. Manipulation results in resource allocation. The attack can be executed remotely, and the exploit has been released publicly. The project has not responded to the issue report.

A vulnerability in java-json-tools json-patch up to 1.13 affects the CopyOperation.apply/MoveOperation.apply functions in src/main/java/com/github/fge/jsonpatch/CopyOperation.java in the Copy Move Operations component. Manipulation leads to improper access controls. Remote exploitation is possible, and the exploit is publicly available. The project has not responded to the issue report.

A vulnerability in java-json-tools jackson-coreutils 2.0 affects the BigDecimal.toPlainString function in src/main/java/com/github/fge/jackson/JacksonUtils.java. Manipulation results in resource consumption. The attack may be initiated remotely, and the exploit has been made public. The project has not responded to the issue report.

Improper restriction of software interfaces to hardware features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potentially cause hardware damage by bypassing driver authentication and accessing critical model-specific registers.

Exposed dangerous method or function in ASUS Armoury Crate allows a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts (SMIs). Repeatedly triggering SMI may lead to a denial-of-service (DoS) condition.

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclose information and disable device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.

Allocation of resources without limits or throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition through system memory exhaustion by bypassing driver authentication and allocating an unrestricted amount of memory.

ASUS Control Center Express Agent has missing authentication for a critical function, allowing an unauthenticated nearby user to control the host via a direct connection when the host has an active login session.

Sensitive information in resource not removed before reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialized memory via a crafted IOCTL request that bypasses the driver's security verification mechanism.

Exposure of sensitive system information to an unauthorized control sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL request by bypassing the driver's verification, potentially providing further insight into the kernel memory layout.

Release of invalid pointer or reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the driver's verification, which can corrupt data structures and cause a system crash (BSOD).

Exposed IOCTL with insufficient access control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by bypassing the driver's verification.

An exposed IOCTL with insufficient access control in the Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request, bypassing the driver's verification. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.

A permissive cross-domain security policy with untrusted domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted web page that sends a request containing a UNC path to the application's local service endpoint.

The D-Link DIR-822A router version A_101 has a vulnerability in the tunnel_set_params function of the L2TP Control Message Parser component, leading to an out-of-bounds write. The attack can be launched remotely, and the exploit has been publicly disclosed.

The D-Link DIR-895L router version A1_102b07 has a vulnerability in the sendOffer/sendACK functions of the file udhcpcd/serverpacket.c in the udhcpcd component, causing a stack-based buffer overflow. The attack can only be performed within the local network, and the exploit has been published.

A vulnerability in ash-project usage_rules involves improper neutralization of escape, meta, or control sequences in output. A malicious package publisher can inject terminal control sequences into the output of mix usage_rules.search_docs. When a developer runs a search, these sequences reach the terminal unchanged, potentially forging displayed URLs, hiding text, or writing to the clipboard. Affects usage_rules from 0.1.18 before 1.2.8.