4297 matches found
Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5460-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5460-1 advisory. It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal memory access and expose...
CVE-2021-26635
In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type. An attacker could use this vulnerability to cause a stack buffer overflow and as a result, perform an attack such as remote code...
CVE-2021-26635
In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type. An attacker could use this vulnerability to cause a stack buffer overflow and as a result, perform an attack such as remote code...
PT-2022-9783 · Unknown · Ark Library
Name of the Vulnerable Software and Affected Versions: ark library affected versions not specified Description: The issue arises from the incorrect use of data types in the code that verifies file sizes in the ark library. This allows an attacker to manipulate the offset read from the target file...
EulerOS 2.0 SP3 : vim (EulerOS-SA-2022-1769)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3984, CVE-2021-4019, CVE-2022-0213 - vim is vulnerable to Use After Free CVE-2021-4069,...
PT-2022-4327
Name of the Vulnerable Software and Affected Versions Nginx NJS version 0.7.2 Description The issue is related to a segmentation violation in the njs string offset function at src/njs string.c. This can lead to an uncontrolled resource consumption. An attacker, acting remotely, may exploit this...
CVE-2022-21147: Use of Out-of-range Pointer Offset
An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-crafted PE file can trigger this vulnerability to cause denial of service and termination of malware scan. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2021-0189: Improper Restriction of Operations within the Bounds of a Memory Buffer
Use of out-of-range pointer offset in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...
NewStart CGSL CORE 5.04 / MAIN 5.04 : exiv2 Multiple Vulnerabilities (NS-SA-2022-0012)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has exiv2 packages installed that are affected by multiple vulnerabilities: - Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in...
Denial Of Service (DoS)
vim:sid is vulnerable to denial of service. The vulnerability exists due to the use of Out-of-range Pointer Offset in GitHub repository vim/vim...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1553)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-1591)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2022-0213 - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. CVE-2022-0261...
PT-2022-29382
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A refcount leak was discovered in the gamecube rtc read offset from sram function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
vim over-range pointer offset vulnerability
Vim is a UNIX-based editor. vim versions prior to 8.2.4774 contain an out-of-range pointer offset vulnerability, which stems from the use of out-of-range pointer offsets in vim. An attacker could exploit this vulnerability to crash the program...
PT-2022-29695
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue concerns the preservation of skb end offset in skb unclone keeptruesize. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
PT-2022-29365
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns the preservation of skb end offset in skb unclone keeptruesize. It was introduced in version v5.16 and fixed in version v5.17.2. The actual impact and attack plausibility ha...
PT-2022-30019
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15.5 through v5.15.32 Description The issue is related to the preservation of skb end offset in skb unclone keeptruesize. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
Fedora 35 : vim (2022-e304fffd34)
The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e304fffd34 advisory. The newest upstream commit Security fixes for CVE-2022-1381, CVE-2022-1420 Tenable has extracted the preceding description block directly from the...
