Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2023-364)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-364 advisory. LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that...

Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-360)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-360 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. CVE-2023-4734 Out-of-bounds Write in...

CVE-2023-44488

A heap-based buffer overflow flaw was found in libvpx, a library used to process VP9 video codecs data. This issue occurs when processing certain specially formatted video data via a crafted HTML page, allowing an attacker to crash or remotely execute arbitrary code in an application, such as a w...

ALPINE-CVE-2023-5344

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969...

CVE-2023-5344

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969...

Heap overflow

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969...

CVE-2023-5344 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969...

CVE-2023-5344 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969...

CVE-2023-5344 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969...

Heap-based Buffer Overflow

vim is vulnerable to Heap-based Buffer Overflow. An attacker could exploit this vulnerability by tricking a user into opening a malicious file or by sending a specially crafted HTTP request to a vulnerable Vim server. Once the vulnerability is exploited, the attacker could take control of the...

Debian: Security Advisory (DSA-5510-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3594 : cups - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3594 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3594-1 [email protected]...

MGASA-2023-0274 Updated indent package fixes security vulnerabilities

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file. CVE-2023-40305 GNU indent 2.2.13 has a heap overread in lexi...

Updated indent package fixes security vulnerabilities

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file. CVE-2023-40305 GNU indent 2.2.13 has a heap overread in lexi...

[SECURITY] [DSA 5510-1] libvpx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5510-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 29, 2023 https://www.debian.org/security/faq -...

Debian dla-3588 : vim - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3588 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3588-1 [email protected]...

PT-2023-9366 · Gimp +9 · Gimp +9

Name of the Vulnerable Software and Affected Versions: GIMP versions prior to 2.10.18-1ubuntu0.1 GIMP versions prior to 2.10.22-4+deb11u1 GIMP versions prior to 2.10.34-1+deb12u1 Description: GIMP GNU Image Manipulation Program contains a vulnerability related to improper handling of crafted PSD...

CVE-2023-5217

A heap-based buffer overflow flaw was found in the way libvpx, a library used to process VP8 and VP9 video codecs data, processes certain specially formatted video data via a crafted HTML page. This flaw allows an attacker to crash or remotely execute arbitrary code in an application, such as a w...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in vp8 encoding in libvpx. Remediation Upgrade CefSharp.Common.NETCore to version 117.2.20 or higher. References - Chrome Releases - GitHub Commit - GitHub Commit - GitHub PR - GitHub PR - GitHub PR - GitHub P...

Update Chrome Now: Google Releases Patch for Actively Exploited Zero-Day Vulnerability

Google on Wednesday rolled out fixes to address a new actively exploited zero-day in the Chrome browser. Tracked as CVE-2023-5217, the high-severity vulnerability has been described as a heap-based buffer overflow in the VP8 compression format in libvpx, a free software video codec library from...