Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Vim vulnerabilities (USN-5147-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5147-1 advisory. It was discovered that Vim incorrectly handled permissions on the .swp file. A local attacker could possibly use this issue to...

Buffer Overflow

There is a heap-based buffer over-read in the fmtentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...

Buffer Overflow

There is a heap-based buffer over-read in the ncfindentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...

PT-2021-7388 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to a Heap-based Buffer Overflow in the vim text editor. It is associated with incorrect handling of CTRL-W f when no file name is present. Exploitation of this issue allows...

Heap-based Buffer Overflow in vim/vim

Description Greetings, A Heap-based Buffer Overflow issue was discovered in Vim. The POC file is reduced to the absolute minimum to reproduce the problem. Please see sanitizer output and the "trimmed" POC file link below. System info OS version : Ubuntu 20.04.2 LTS + Clang 12 with ASan Vim Versio...

Oracle Linux 8 : virt:ol / and / virt-devel:rhel (ELSA-2021-1762)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1762 advisory. - Resolves: bz1917451 CVE-2020-29443 virt:rhel/qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands rhel-8.4.0 - Resolves: bz1919111...

CentOS 8 : exiv2 (CESA-2021:4173)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4173 advisory. - exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata CVE-2021-29457 - exiv2: Out-of-bounds read in Exiv2::Internal::CrwMap::encode...

RHEL 8 : binutils (RHSA-2021:4364)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4364 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includ...

CentOS 8 : jasper (CESA-2021:4235)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4235 advisory. - jasper: Heap-based buffer overflow in cpcreate in jpcenc.c CVE-2020-27828 - jasper: Out of bounds read in jp2decode in jp2dec.c CVE-2021-26926 -...

RHEL 8 : libsolv (RHSA-2021:4408)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4408 advisory. The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: heap-based buffe...

CentOS 8 : file (CESA-2021:4374)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4374 advisory. - file: heap-based buffer overflow in cdfreadpropertyinfo in cdf.c CVE-2019-18218 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : libsepol (CESA-2021:4513)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4513 advisory. - libsepol: use-after-free in cilverifyclassperms CVE-2021-36084, CVE-2021-36085 - libsepol: use-after-free in cilresetclasspermission CVE-2021-36086 -...

RHEL 8 : file (RHSA-2021:4374)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4374 advisory. The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types,...

CentOS 8 : compat-exiv2-026 (CESA-2021:4319)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4319 advisory. - exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS CVE-2021-31292 - exiv2: Out-of-bounds read in...

RHEL 8 : ncurses (RHSA-2021:4426)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4426 advisory. The ncurses new curses library routines are a terminal-independent method of updating character screens with reasonable optimization. The...

CentOS 8 : libtiff (CESA-2021:4241)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4241 advisory. - libtiff: Memory allocation failure in tiff2rgba CVE-2020-35521, CVE-2020-35522 - libtiff: Integer overflow in tifgetimage.c CVE-2020-35523 - libtiff:...

CentOS 8 : binutils (CESA-2021:4364)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4364 advisory. - binutils: Race window allows users to own arbitrary files CVE-2021-20197 - binutils: Heap-based buffer overflow in bfdgetlsigned32 in libbfd.c becaus...

RHEL 8 : exiv2 (RHSA-2021:4173)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4173 advisory. Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support...

RHEL 8 : libtiff (RHSA-2021:4241)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4241 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: Integer...

RHEL 8 : jasper (RHSA-2021:4235)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4235 advisory. JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard. Security Fixes: jasper: Heap-based buffer overflow in...