EulerOS 2.0 SP8 : vim (EulerOS-SA-2021-2650)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3770 Note that Tenable Network Security has extracted the preceding description block...

Heap-Based Buffer Overflow

libmysofa.so is vulnerable to heap-based buffer overflow. The lack of size check in the readOHDRHeaderMessageDataLayout function in dataobject.c causes a heap-based buffer overflow which could result in an application crash...

openSUSE 15 Security Update : ncurses (openSUSE-SU-2021:1417-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1417-1 advisory. - An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow. CVE-2021-39537 Note that Nessus ha...

CVE-2021-22564: Heap-based Buffer Overflow

For certain valid JPEG XL images with a size slightly larger than an integer number of groups 256x256 pixels when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur when processing the...

Debian DLA-2803-1 : libsdl2 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2803 advisory. - An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulti...

Debian DLA-2804-1 : libsdl1.2 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2804 advisory. Several vulnerability have been fixed in libsdl2, the older version of the Simple DirectMedia Layer library that provides low level access to audio, keyboard, mous...

CVE-2021-3903

vim is vulnerable to Heap-based Buffer Overflow Mitigation Do not run untrusted vim scripts with -s scriptin as it is never safe to do so...

Updated ffmpeg packages fix security vulnerability

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote malicious user to cause a Denial of Service. CVE-2020-20446 FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service...

CVE-2021-3756

libmysofa is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3756

libmysofa is vulnerable to Heap-based Buffer Overflow...

Heap overflow

libmysofa is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3756

CVE-2021-3756 affects the libmysofa library (as referenced across connected documents, including NVD and related advisories). The available details confirm a heap-based buffer overflow vulnerability in libmysofa. The connected sources do not specify affected versions, root cause specifics beyond ...

CVE-2021-3756

libmysofa is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3756: Heap-based Buffer Overflow

libmysofa is vulnerable to Heap-based Buffer Overflow...

Debian DLA-2796-1 : jbig2dec - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2796 advisory. Two issues have been found in jbig2dec, a JBIG2 decoder library. One issue is related to an overflow with a crafted image file. The other is related to a NULL...

CVE-2021-22465

A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable...

CVE-2021-22465

The CVE-2021-22465 entry relates to a heap-based buffer overflow in a HarmonyOS component. Impact described as local attackers potentially causing kernel system unavailability. Connected sources (including Red Hat and CNVD variants) consistently identify the same issue without additional technica...

CVE-2021-22465: Out-of-bounds Write

A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable...

PT-2021-15081

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: A component of the HarmonyOS has a Heap-based Buffer Overflow issue. Local attackers may exploit this to cause the Kernel System to become unavailable. Recommendations: At the moment, the...

NewStart CGSL CORE 5.05 / MAIN 5.05 : audiofile Multiple Vulnerabilities (NS-SA-2021-0171)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has audiofile packages installed that are affected by multiple vulnerabilities: - The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an...