1130 matches found
RHEL 5 : libexif (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libexif: Out-of-bounds heap read in exifdatasavedataentry function CVE-2017-7544 - A vulnerability was...
RHEL 7 : libexif (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libexif: Out-of-bounds heap read in exifdatasavedataentry function CVE-2017-7544 - A vulnerability was...
RHEL 5 : expat (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - expat: Out-of-bounds heap read on crafted input causing crash CVE-2016-0718 - The XML parser xmlparse.c i...
RHEL 5 : libical (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libical: Heap buffer over-read in icaltimefromstring CVE-2016-5827 - The icalpropertynewclone function in...
opensc: buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package
A vulnerability was found in OpenSC. This issue causes a buffer overrun in the pkcs15 cardoshaveverifyrcpackage. This flaw allows an attacker to supply a smart card package with a malformed ASN1 context. The cardoshaveverifyrcpackage function scans the ASN1 buffer for two tags, where the remainin...
USN-6355-1 grub2-signed, grub2-unsigned, shim, and shim-signed vulnerability
Daniel Axtens discovered that specially crafted images could cause a heap-based out-of-bonds write. A local attacker could possibly use this to circumvent secure boot protections. CVE-2021-3695 Daniel Axtens discovered that specially crafted images could cause out-of-bonds read and write. A local...
SUSE CVE-2023-41910
An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDPTLVADDRESSES TLVs, a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdpdecode in daemon/protocols/cdp.c...
Oracle Linux 7 : GStreamer (ELSA-2017-2060)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2060 advisory. clutter-gst2 2.0.18-1 - Update to 2.0.18 - Remove obsolete patches - Use license macro for COPYING - Resolves: 1386833 gnome-video-effects 0.4.3-1 -...
OESA-2023-1575 gawk security update
The gawk package is the GNU implementation of awk. The awk utility interprets a special-purpose programming language that makes it possible to handle simple data-reformatting jobs with just a few lines of code. Security Fixes: A heap out of bound read issue exists in builtin.c of gawk prior to...
Low: gawk
Issue Overview: A heap out-of-bounds read flaw was found in builtin.c in the gawk package which may result in a crash of the software. CVE-2023-4156 Affected Packages: gawk Issue Correction: Run dnf update gawk --releasever 2023.1.20230825 or dnf update --advisory ALAS2023-2023-292 --releasever...
Ubuntu 16.04 ESM : GStreamer vulnerability (USN-6291-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6291-1 advisory. Hanno Bock discovered that GStreamer incorrecly handled certain datetime strings. An attacker could possibly use this issue to cause a denial of service or expose...
UBUNTU-CVE-2023-4156
A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information...
DEBIAN-CVE-2023-4135
A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can ...
AZL-27012 CVE-2023-2977 affecting package opensc for versions less than 0.22.0-3
A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardoshaveverifyrcpackage. The attacker can supply a smart card package with malformed ASN1 context. The cardoshaveverifyrcpackage function scans the ASN1 buffer for 2 tags, where remaining lengt...
UBUNTU-CVE-2023-2977
A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardoshaveverifyrcpackage. The attacker can supply a smart card package with malformed ASN1 context. The cardoshaveverifyrcpackage function scans the ASN1 buffer for 2 tags, where remaining lengt...
OpenSC 缓冲区错误漏洞
OpenSC is an open source smart card tool and middleware. OpenSC suffers from a security vulnerability that stems from a buffer overflow, which can be exploited by an attacker to perform a buffer override read of the heap...
Fedora 36 : lldpd (2023-3e4feeadec)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-3e4feeadec advisory. Update to the latest 1.0.16: Lots of updates, enhancements and fixes from 1.0.4 CVEs: CVE-2020-27827, CVE-2021-43612 Tenable has extracted the...
Fedora 38 : lldpd (2023-88991d2713)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-88991d2713 advisory. Update to the latest 1.0.16: Lots of updates, enhancements and fixes from 1.0.4 CVEs: CVE-2020-27827, CVE-2021-43612 Tenable has extracted the...
Fedora 37 : lldpd (2023-c0c184a019)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c0c184a019 advisory. Update to the latest 1.0.16: Lots of updates, enhancements and fixes from 1.0.4 CVEs: CVE-2020-27827, CVE-2021-43612 Tenable has extracted the...
