30257 matches found
CBL Mariner 2.0 Security Update: pango (CVE-2019-1010238)
The version of pango installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-1010238 advisory. - Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow c...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-5963-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5963-1 advisory. It was discovered that Vim was not properly performing memory management operations. An attacker could possibly use...
Fedora 38 : vim (2023-43cb13aefb)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-43cb13aefb advisory. Security fixes for CVE-2023-1175, CVE-2023-1170, CVE-2023-1264. Tenable has extracted the preceding description block directly from the Fedora...
CBL Mariner 2.0 Security Update: vim (CVE-2023-0051)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0051 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. CVE-2023-0051 Note that Nessus has no...
Slackware Linux 15.0 / current vim Multiple Vulnerabilities (SSA:2023-079-02)
The version of vim installed on the remote host is prior to 9.0.1418. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-079-02 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. CVE-2023-1170 - Incorrect Calculation of Buffer...
CBL Mariner 2.0 Security Update: sudo (CVE-2022-43995)
The version of sudo installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-43995 advisory. - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c...
CBL Mariner 2.0 Security Update: vim (CVE-2023-0288)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0288 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. CVE-2023-0288 Note that Nessus has no...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1568)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP10 : krb5 (EulerOS-SA-2023-1527)
According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC,...
EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2023-1530)
According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack overflow was discovered in the TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of...
EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2023-1555)
According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack overflow was discovered in the TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of...
EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1543)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. CVE-2022-3491 - Heap-based Buffer Overflow in GitHub repository vim/vim...
heap-buffer-overflow in vim_strrchr
Description heap based buffer overflow in vimstrrchr at strings.c:682 Vim Version git log commit ea83c194625e51c28a2796eba9ba87b0b9ab23e0 HEAD - master, tag: v9.0.1414, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S POCvimstrrchr -c :qa!...
Denial Of Service (DoS)
libgpac.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap-based buffer over-read in the prtpbuilderdohevc function of rtppckmpeg4.c, allowing an attacker to cause an application crash...
CVE-2023-1448
A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gfm2tsprocesssdt of the file mediatools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been...
CVE-2023-1448
A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gfm2tsprocesssdt of the file mediatools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been...
CVE-2023-1448
A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gfm2tsprocesssdt of the file mediatools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been...
CVE-2023-1448 GPAC mpegts.c gf_m2ts_process_sdt heap-based overflow
A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gfm2tsprocesssdt of the file mediatools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been...
CVE-2023-1448
CVE-2023-1448 affects GPAC 2.3-DEV-rev35-gbbca86917-master. The vulnerability is in the function gf_m2ts_process_sdt (media_tools/mpegts.c) and causes a heap-based buffer overflow. Local attack required; the exploit has been disclosed publicly. A patch is recommended/remediation: apply updates to...
