EulerOS 2.0 SP9 : unbound (EulerOS-SA-2024-2840)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A NULL pointer dereference flaw was found in the ubctxsetfwd function in Unbound. This issue could allow an attacker who can invoke specific...

CVE-2024-35422

vmir e8117 was discovered to contain a heap buffer overflow via the wasmcall function at /src/vmirwasmparser.c...

PT-2024-26491 · Vmir · Vmir

Name of the Vulnerable Software and Affected Versions: vmir version e8117 Description: A heap buffer overflow issue was discovered in vmir via the wasm call function at /src/vmir wasm parser.c. This issue occurs due to a problem in the wasm call function, which can lead to a heap buffer overflow...

CVE-2024-35423

vmir e8117 was discovered to contain a heap buffer overflow via the wasmparsesectionfunctions function at /src/vmirwasmparser.c...

EulerOS 2.0 SP10 : unbound (EulerOS-SA-2024-2917)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-buffer-overflow flaw was found in the cfgmarkports function within Unbound's configfile.c, which can lead to memory corruption.This issue...

EulerOS 2.0 SP10 : unbound (EulerOS-SA-2024-2897)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-buffer-overflow flaw was found in the cfgmarkports function within Unbound's configfile.c, which can lead to memory corruption.This issue...

EulerOS 2.0 SP9 : unbound (EulerOS-SA-2024-2822)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A NULL pointer dereference flaw was found in the ubctxsetfwd function in Unbound. This issue could allow an attacker who can invoke specific...

CVE-2023-29125

A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700...

CVE-2023-29125

CVE-2023-29125 describes a heap buffer overflow that can be triggered by sending a specific packet to TCP port 7700 in Enel X Waybox/ JuiceBox devices (Waybox family). The Red Hat and vendor-enrichment entries corroborate a heap overflow condition rooted in Enel X firmware (CM_main.exe in JuiceBo...

OSV-2024-1279 Heap-buffer-overflow in opj_j2k_read_tile_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538309 Crash type: Heap-buffer-overflow WRITE 8 Crash state: opjj2kreadtileheader opjj2kdecodetiles opjj2kdecode...

EulerOS 2.0 SP12 : curl (EulerOS-SA-2024-2795)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libcurl's ASN1 parser code has the GTime2str function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field,...

RHEL 6 : postgresql92-postgresql (RHSA-2014:0221)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0221 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Multiple stack-based buffer overflow flaws were found in the...

RHEL 7 : qemu-kvm-rhev (RHSA-2016:1654)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1654 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provid...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2024-2783)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : qemu-kvm-rhev (RHSA-2017:0982)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0982 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provi...

Heap-Based Buffer Overflow

MicroPython is vulnerable to a Heap-based buffer overflow. The vulnerability is due to improper string length comparison during the VFS unmount process in the mpvfsumount function, which allows a remote attacker to trigger a heap buffer overflow read by supplying a crafted unmount path...

PT-2024-35735 · Assimp +2 · Assimp +2

Name of the Vulnerable Software and Affected Versions: Assimp version 5.4.3 Description: A heap-buffer-overflow issue was discovered in the SkipSpacesAndLineEnd function. This occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application cras...

CBL Mariner 2.0 Security Update: gdb (CVE-2023-39130)

The version of gdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-39130 advisory. - GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function peas16 at...

OSV-2023-1398 Heap-buffer-overflow in load_1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515517 Crash type: Heap-buffer-overflow READ 1 Crash state: load1 apprenticeload fileapprentice...

PT-2024-40554 · Git +1 · File

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash state includes functions such as load 1, apprentice...