120 matches found
CVE-2021-3796
vim is vulnerable to Use After Free...
CVE-2021-3796
CVE-2021-3796 is a use-after-free vulnerability in Vim. Multiple connected advisories confirm the issue in Vim and attribute the root cause to improper memory handling (notably use-after-free in relevant Vim code paths such as nv_replace()). The vulnerability affects Vim versions prior to the fix...
CVE-2021-3796 Use After Free in vim/vim
vim is vulnerable to Use After Free...
SUSE: Security Advisory (SUSE-SU-2013:1390-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:1529-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-5238
CVE-2015-5238 has no separate technical details in the initial entry; it is a reservation duplicate of CVE-2015-3796. Connected advisories indicate the TRE library vulnerability involved a crafted regular expression leading to context-dependent memory corruption (CVE-2015-3796) and a related memo...
CVE-2019-3796
CVE-2019-3796 entry is rejected and does not represent an active vulnerability.
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Paramiko vulnerability (USN-3796-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3796-1 advisory. Daniel Hoffman discovered that Paramiko incorrectly handled authentication when being used as a server. A remote attacker could use this...
USN-3796-2: Paramiko vulnerability
USN-3796-1 fixed a vulnerability in paramiko. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Daniel Hoffman discovered that Paramiko incorrectly handled authentication when being used as a server. A remote attacker could use this issue to bypass...
Fedora Update for tre FEDORA-2016-0a952a3bc0
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for tre FEDORA-2016-0ff6c3d84b
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for tre FEDORA-2016-cd09eab674
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 25 : tre (2016-0a952a3bc0)
This update includes the following fixes : - fix for CVE-2016-8859 - fix for CVE-2015-3796 see https://github.com/laurikari/tre/issues/37 and https://bugs.chromium.org/p/project-zero/issues/detail?i d=428 - fix for parallel installation of multilib packages Note that Tenable Network Security has...
Fedora 24 : tre (2016-cd09eab674)
This update includes the following fixes : - fix for CVE-2016-8859 - fix for CVE-2015-3796 see https://github.com/laurikari/tre/issues/37 and https://bugs.chromium.org/p/project-zero/issues/detail?i d=428 - fix for parallel installation of multilib packages Note that Tenable Network Security has...
Fedora 23 : tre (2016-0ff6c3d84b)
This update includes the following fixes : - fix for CVE-2016-8859 - fix for CVE-2015-3796 see https://github.com/laurikari/tre/issues/37 and https://bugs.chromium.org/p/project-zero/issues/detail?i d=428 - fix for parallel installation of multilib packages Note that Tenable Network Security has...
CVE-2016-3796
CVE-2016-3796 covers an elevation-of-privilege vulnerability in the MediaTek power driver present on Android One devices prior to 2016-07-05. A local attacker could exploit a crafted application to gain privileged execution within the kernel. Public details in the 2016-07-01/07-05 Android bulleti...
CVE-2015-3796
creationtimestamp| type| source ---|---|--- 2015-09-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38263 2020-07-21 22:46:17+00:00| seen| https://t.me/VulnerabilityNews/15983 2020-07-21 22:55:25+00:00| seen| https://t.me/cibsecurity/13571...
Memory corruption
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted regular expression, a different vulnerability than CVE-2015-3796 and...
CVE-2015-3796
CVE-2015-3796 affects the TRE library used by Appleās iOS and macOS. A crafted regular expression can trigger a memory corruption in TRE, leading to arbitrary code execution or a denial of service (memory corruption and application crash). The description specifies affected versions: iOS prior to...