19933 matches found
Fedora 38 : godot (2023-59e4f4c9bb)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-59e4f4c9bb advisory. This updates provides Godot 4.1.2 as the latest stable release for this free and open source game engine. It fixes many bugs, improves features and usability...
F5 Networks BIG-IP : glibc vulnerability (K54823184)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K54823184 advisory. - In the GNU C Library aka glibc or libc6 through 2.29, proceednextnode in posix/regexec.c has a heap- based buffer...
Amazon Linux 2 : zlib (ALAS-2023-2320)
The version of zlib installed on the remote host is prior to 1.2.7-19. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2320 advisory. MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long...
Medium: zlib
Issue Overview: MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. CVE-2023-45853 Affected Packages: zlib Note: This advisor...
CVE-2020-27792
A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000printpage function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service...
Huawei EulerOS: Security Advisory for freetype (EulerOS-SA-2023-3053)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-202310-21 : ConnMan: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202310-21 ConnMan: Multiple Vulnerabilities - An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for the presence of sufficient Header Data, leading to an...
SUSE SLED15: libicu73_2 / libicu73_2-bedata / libicu73_2-devel / libicu73_2-doc / etc (SUSE-SU-2023:3563-3)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3563-3 advisory. - Update to release 73.2 CLDR extends the support for short Chinese sort orders to cover some additional,...
Huawei EulerOS: Security Advisory for freetype (EulerOS-SA-2023-3070)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-3024)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CBL Mariner 2.0 Security Update: vim (CVE-2023-5344)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5344 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. CVE-2023-5344 Note that Nessus has no...
Fedora 38 : xorg-x11-server-Xwayland (2023-7a94186139)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-7a94186139 advisory. Security fix for CVE-2023-5367 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...
Denial Of Service (DoS)
imagemagick is vulnerable to Denial of Service DoS. A heap-based buffer overflow vulnerability allows an attacker to cause denial of service conditions via ReadTIFFImage in coders/tiff.c, by exploiting a flaw in the way that ImageMagick handles TIFF images...
Denial Of Service (DoS)
imagemagick is vulnerable to Denial of Service DoS. This vulnerability allows an attacker to trick a user into opening a specially crafted TIFF image file, resulting in an application crash and denial of service DoS due to a heap-based buffer overflow in coders/tiff.c...
SUSE SLED15: libminizip1 / libminizip1-32bit / libz1 / libz1-32bit / etc (SUSE-SU-2023:4215-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4215-1 advisory. - CVE-2023-45853: Fixed an integer overflow that would lead to a buffer overflow in the minizip...
SUSE SLES12: libz1 / libz1-32bit / zlib-devel / zlib-devel-32bit / etc (SUSE-SU-2023:4216-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4216-1 advisory. - CVE-2023-45853: Fixed an integer overflow that would lead to a buffer overflow in the minizip subcomponent bsc1216378. Tenable has extract...
Fedora 37 : curl (2023-fef2b8da32)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-fef2b8da32 advisory. - fix cookie injection with none file CVE-2023-38546 - fix SOCKS5 heap buffer overflow CVE-2023-38545 Tenable has extracted the preceding descriptio...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : zlib (SUSE-SU-2023:4217-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4217-1 advisory. - MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in...
openexr -- Heap Overflow in Scanline Deep Data Parsing
Austin Hackers Anonymous report: Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEXR image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. ... it is...
