165 matches found
openSUSE Security Advisory (SUSE-SU-2024:3216-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15: expat / libexpat-devel / libexpat-devel-32bit / libexpat1 / etc (SUSE-SU-2024:3216-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3216-1 advisory. - CVE-2024-45492: integer overflow in function nextScaffoldPart. bsc1229932 - CVE-2024-45491:...
SUSE-SU-2024:3216-1 Security update for expat
This update for expat fixes the following issues: - CVE-2024-45492: integer overflow in function nextScaffoldPart. bsc1229932 - CVE-2024-45491: integer overflow in dtdCopy. bsc1229931 - CVE-2024-45490: negative length for XMLParseBuffer not rejected. bsc1229930...
SUSE: Security Advisory (SUSE-SU-2024:3216-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Tenable Nessus Agent < 10.7.3 and earlier Multiple Vulnerabilities (TNS-2024-14)
According to its self-reported version, the Tenable Nessus Agent running on the remote host is prior to 10.7.2 and earlier. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-14 advisory. - Nessus Agent leverages third-party software to help provide underlying...
Ubuntu: Security Advisory (USN-7001-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : xmltok library vulnerabilities (USN-7001-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7001-1 advisory. Shang-Hung Wan discovered that Expat, contained within the xmltok library, did not properly handle certain function...
Tenable Nessus < 10.8.3 Multiple Vulnerabilities (TNS-2024-15 & TNS-2024-16)
According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 10.8.3. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-15 and TNS-2024-16 advisories. - Nessus leverages third-party software to help provide...
CLSA-2024-1725993841 expat: Fix of 2 CVEs
CVE-2024-45491: Detect integer overflow in dtdCopy on 32-bit platforms - CVE-2024-45492: Detect integer overflow in nextScaffoldPart on 32-bit platforms...
SUSE SLES12 Security Update : expat (SUSE-SU-2024:3182-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3182-1 advisory. - CVE-2024-45492: Detect integer overflow in function nextScaffoldPart. bsc1229932 - CVE-2024-45491: Detect integer overflow in...
Fedora 40 : expat (2024-f27c29c09c)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-f27c29c09c advisory. Rebase to version 2.6.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
SUSE: Security Advisory (SUSE-SU-2024:3182-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2024:3182-1 Security update for expat
This update for expat fixes the following issues: - CVE-2024-45492: Detect integer overflow in function nextScaffoldPart. bsc1229932 - CVE-2024-45491: Detect integer overflow in dtdCopy. bsc1229931 - CVE-2024-45490: Reject negative len for XMLParseBuffer. bsc1229930...
[slackware-security] python3
New python3 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.20-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Bundled libexpat was updated to 2.6.3. Fix quadratic...
Slackware: Security Advisory (SSA:2024-252-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Slackware: Security Advisory (SSA:2024-248-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
BELL-CVE-2024-45491
Bulletin has no description...
SUSE CVE-2024-45491
An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms where UINTMAX equals SIZEMAX...
CVE-2024-45491
creationtimestamp| type| source ---|---|--- 2024-08-30 05:37:13+00:00| seen| https://t.me/cvedetector/4493 2024-11-12 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-317-01 2025-06-12 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-0...