CVE-2022-31782

CVE-2022-31782 affects ftbench.c in FreeType Demo Programs up to version 2.12.1, causing a heap-based buffer overflow. The connected advisories enumerate this CVE in EulerOS/Astra Linux contexts, but no exploit details or patch/version information is provided in the documents.

CVE-2022-31782

ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow...

Security Bulletin: PowerVC installation on RHEL is vulnerable to MariaDB with CVE-2021-46669, CVE-2022-24048, MariaDB - 219814, MariaDB - 219815, CVE-2022-24050, CVE-2022-24052

Summary Summary guidance: MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used and it is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the processing of SQL queries. The specific flaw exists...

CVE-2022-30789

A crafted NTFS image can cause a heap-based buffer overflow in ntfschecklogclientarray in NTFS-3G through 2021.8.22...

CVE-2022-30789

A crafted NTFS image can cause a heap-based buffer overflow in ntfschecklogclientarray in NTFS-3G through 2021.8.22...

CVE-2022-30788

A crafted NTFS image can cause a heap-based buffer overflow in ntfsmftrecalloc in NTFS-3G through 2021.8.22...

CVE-2022-30786

A crafted NTFS image can cause a heap-based buffer overflow in ntfsnamesfullcollate in NTFS-3G through 2021.8.22...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Root shell PoC for CVE-2021-3156 no brutef...

CVE-2022-30789

NTFS-3G contains a heap-based buffer overflow in ntfs_check_log_client_array (through 2021.8.22). Affected: NTFS-3G implementations shipping NTFS support; root cause is a boundary/overflow issue when handling NTFS image data. Impact is reported as high (confidentiality, integrity, and availabilit...

CVE-2022-30786

A crafted NTFS image can cause a heap-based buffer overflow in ntfsnamesfullcollate in NTFS-3G through 2021.8.22...

SUSE SLES12 Security Update : fribidi (SUSE-SU-2022:1845-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1845-1 advisory. - A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted fil...

EulerOS 2.0 SP3 : bluez (EulerOS-SA-2022-1707)

According to the versions of the bluez packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP implementation. By...

EulerOS 2.0 SP3 : binutils (EulerOS-SA-2022-1706)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An out-of-bounds flaw was found in binutils stabs functionality. The attack needs to be initiated locally where an attacker could convince a...

EulerOS 2.0 SP3 : vim (EulerOS-SA-2022-1769)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3984, CVE-2021-4019, CVE-2022-0213 - vim is vulnerable to Use After Free CVE-2021-4069,...

EulerOS 2.0 SP3 : opensc (EulerOS-SA-2022-1752)

According to the versions of the opensc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenSC before 0.20.0 has a double free in coolkeyfreeprivatedata because coolkeyaddobject in libopensc/card-coolkey.c lacks a uniqueness check...

CVE-2022-30788

NTFS-3G contains a vulnerability for CVE-2022-30788: a crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc (NTFS-3G up to 2021.8.22). Public sources (e.g., Astra Linux security bulletins and enterprise advisories) reference this CVE and guide updating to mitigate, but ...

CVE-2022-30789

A crafted NTFS image can cause a heap-based buffer overflow in ntfschecklogclientarray in NTFS-3G through 2021.8.22...

CVE-2022-1886

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-1886

CVE-2022-1886 affects Vim prior to 8.2. It is a heap-based buffer overflow in Vim’s utf_head_off() function (mbyte.c), which can cause a crash and potentially code execution when processing crafted input. Public details also appear in Astra/Ubuntu advisories; a remediation patch/version is not sp...

EulerOS 2.0 SP3 : aide (EulerOS-SA-2022-1702)

According to the versions of the aide package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of...