SUSE SLES12 Security Update : xterm (SUSE-SU-2022:3952-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3952-1 advisory. - CVE-2022-24130: Fixed buffer overflow in setsixel when Sixel support is enabled. bsc1195387 Tenable has extracted the preceding descriptio...

Jenkins Lucene-Search Plugin 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A cross-site scripting...

GSD-2022-1004054 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by...

GSD-2022-1003874 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 b...

GSD-2022-1003549 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 b...

GSD-2022-1003300 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by...

GSD-2022-1003000 irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x

irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by...

Huawei EulerOS: Security Advisory for xterm (EulerOS-SA-2022-1593)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0051 Updated xterm packages fix security vulnerability

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text. CVE-2022-24130...

xterm through Patch 370 when Sixel support is enabled allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.

...

CVE-2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

CVE-2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

Buffer overflow

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

CVE-2022-24130

The CVE-2022-24130 issue affects xterm with Sixel support enabled, where a crafted text input can trigger a buffer overflow in graphics_sixel.c:set_sixel. The vulnerability is active in xterm builds up to patches around 370, and multiple downstream advisories (e.g., CBL-Mariner stating affected v...

CVE-2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

CVE-2022-24130

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

PT-2022-6590 · Xterm +4 · Xterm +4

Name of the Vulnerable Software and Affected Versions: xterm versions through Patch 370 Description: The issue is related to a buffer overflow in the set sixel function within the graphics sixel.c component of the xterm terminal emulator. This occurs when Sixel support is enabled and an attacker...

Malaysia Air Downplays Frequent-Flyer Data Breach

Malaysia Airlines sent out an email to frequent flyer program members assuring them that there’s “no evidence” their personal data has been misused in the wake of a supply-chain attack via a third-party vendor. However, experts think that’s unlikely. And, they say the repercussions could be...

Huawei E6878-370 Denial of Service Vulnerability

The Huawei E6878-370 is a portable 5G router from Huawei China. A security vulnerability exists in Huawei E6878-370 version 10.0.3.1, E6878-870 version 10.0.3.1, which originates from the system not checking when a user processes an event, and can be exploited by an attacker to cause a process...

CVE-2020-9111

E6878-370 versions 10.0.3.1H557SP27C233,10.0.3.1H563SP21C233 and E6878-870 versions 10.0.3.1H557SP27C233,10.0.3.1H563SP11C233 have a denial of service vulnerability. The system does not properly check some events, an attacker could launch the events continually, successful exploit could cause...