CVE-2020-19190

A flaw was found in the ncurses library. This issue occurs when processing a crafted terminfo database, causing a heap-based buffer overflow, resulting in an application crash. Mitigation Do not compile or decompile untrusted terminfo descriptions...

CVE-2020-19189

A flaw was found in the ncurses library. This issue occurs when processing a crafted terminfo database, causing a heap-based buffer overflow, resulting in an application crash. Mitigation Do not compile or decompile untrusted terminfo descriptions...

Fedora 38 : ImageMagick (2023-27548af422)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-27548af422 advisory. Update ImageMagick to 7.1.1.15 2217558 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CVE-2020-19726

A heap-based buffer overflow was found in binutils in the bfdgetl32 function, relating to the auxiliary symbol data. This flaw allows an attacker to read or write to system memory or cause a denial of service...

Amazon Linux 2 : libjpeg-turbo (ALAS-2023-2214)

The version of libjpeg-turbo installed on the remote host is prior to 2.0.90-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2214 advisory. The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a...

CVE-2021-46174

Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37...

CVE-2021-32420

dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...

CVE-2021-32420

dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...

Heap overflow

dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...

CVE-2021-32420

dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...

CVE-2021-46174

Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37...

PT-2023-12166 · Dpic +1 · Dpic +1

Name of the Vulnerable Software and Affected Versions: dpic version 2021.01.01 Description: The issue is a Heap-based Buffer Overflow in the thestorestring function in dpic.y. This occurs due to improper handling of data, leading to a potential overflow. No information is provided about the...

CVE-2021-32420

dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...

CVE-2021-32420

CVE-2021-32420 affects dpic 2021.01.01 and is caused by a Heap-based Buffer Overflow in the thestorestring function in dpic.y. The CVE’s NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH) with Network attack vector, Low attack complexity, no privileges or user interaction, and Availability impa...

CVE-2021-32420

dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...

CVE-2021-46174

CVE-2021-46174 is a heap-based buffer overflow in GNU Binutils objdump (function bfd_getl32). Multiple connected advisories reference the same issue, with descriptions asserting a heap overflow in Binutils objdump 3.37 and related components. The CVE is associated with potential denial-of-service...

CVE-2021-32420

dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...

Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-6302-1)

The remote Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6302-1 advisory. It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening ...

SUSE SLED12: ImageMagick / ImageMagick-config-6-SUSE / etc (SUSE-SU-2023:3357-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3357-1 advisory. - CVE-2023-3745: Fixed heap out of bounds read in PushCharPixel in quantum-private.h bsc1213624. Tenable has extracted...

PDF-XChange Editor OXPS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...