CBL Mariner 2.0 Security Update: vim (CVE-2022-2344)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2344 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045. CVE-2022-2344 Note that Nessus has no...

CBL Mariner 2.0 Security Update: pango (CVE-2019-1010238)

The version of pango installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-1010238 advisory. - Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow c...

Fedora 38 : vim (2023-43cb13aefb)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-43cb13aefb advisory. Security fixes for CVE-2023-1175, CVE-2023-1170, CVE-2023-1264. Tenable has extracted the preceding description block directly from the Fedora...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-5963-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5963-1 advisory. It was discovered that Vim was not properly performing memory management operations. An attacker could possibly use...

CBL Mariner 2.0 Security Update: vim (CVE-2023-0288)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0288 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. CVE-2023-0288 Note that Nessus has no...

CBL Mariner 2.0 Security Update: vim (CVE-2023-0433)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0433 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. CVE-2023-0433 Note that Nessus has no...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1568)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: vim (CVE-2023-0051)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0051 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. CVE-2023-0051 Note that Nessus has no...

CBL Mariner 2.0 Security Update: vim (CVE-2022-2343)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2343 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044. CVE-2022-2343 Note that Nessus has no...

Slackware Linux 15.0 / current vim Multiple Vulnerabilities (SSA:2023-079-02)

The version of vim installed on the remote host is prior to 9.0.1418. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-079-02 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. CVE-2023-1170 - Incorrect Calculation of Buffer...

CBL Mariner 2.0 Security Update: vim (CVE-2021-3973)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3973 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3973 Note that Nessus has not tested for this issue but...

CBL Mariner 2.0 Security Update: lua (CVE-2022-28805)

The version of lua installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-28805 advisory. - singlevar in lparser.c in Lua from including 5.4.0 up to excluding 5.4.4 lacks a certain luaKexp2anyregup call,...

CBL Mariner 2.0 Security Update: pixman (CVE-2022-44638)

The version of pixman installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-44638 advisory. - In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2023-1555)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack overflow was discovered in the TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2023-1530)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack overflow was discovered in the TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1543)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. CVE-2022-3491 - Heap-based Buffer Overflow in GitHub repository vim/vim...

EulerOS 2.0 SP10 : krb5 (EulerOS-SA-2023-1527)

According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC,...

heap-buffer-overflow in vim_strrchr

Description heap based buffer overflow in vimstrrchr at strings.c:682 Vim Version git log commit ea83c194625e51c28a2796eba9ba87b0b9ab23e0 HEAD - master, tag: v9.0.1414, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S POCvimstrrchr -c :qa!...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap-based buffer over-read in the prtpbuilderdohevc function of rtppckmpeg4.c, allowing an attacker to cause an application crash...

CVE-2023-1448

A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gfm2tsprocesssdt of the file mediatools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been...