CentOS 8 : SDL (CESA-2020:4627)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4627 advisory. - SDL: buffer over-read in IMAADPCMnibble in audio/SDLwave.c CVE-2019-7572 - SDL: heap-based buffer over-read in InitMSADPCM in audio/SDLwave.c...

EulerOS 2.0 SP8 : p11-kit (EulerOS-SA-2021-1161)

According to the versions of the p11-kit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the...

CentOS 8 : jbig2dec (CESA-2020:2897)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:2897 advisory. - jbig2dec: heap-based buffer overflow in jbig2imagecompose in jbig2image.c CVE-2020-12268 Note that Nessus has not tested for this issue but has instead relied...

Sudo 1.9.5p1 - (Baron Samedit) Heap-Based Buffer Overflow Privilege Escalation Exploit (1)

Exploit Title: Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation 1 Exploit Author: West Shepherd Version: Sudo legacy versions from 1.8.2 to 1.8.31p2, stable versions from 1.9.0 to 1.9.5p1. Tested on: Ubuntu 20.04.1 LTS Sudo version 1.8.31 CVE : CVE-2021-3156 Credit...

Fedora 33 : netpbm (2021-df9ede6a02)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-df9ede6a02 advisory. - The pmmallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service heap-based buffer...

CentOS 8 : cups (CESA-2020:4469)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4469 advisory. - cups: heap based buffer overflow in libcups's ppdFindOption in ppd-mark.c CVE-2020-3898 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : openjpeg2 (CESA-2020:0274)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0274 advisory. - openjpeg: Heap-based buffer overflow in opjt1clbldecodeprocessor CVE-2020-6851 Note that Nessus has not tested for this issue but has instead relied only on t...

CentOS 8 : freetype (CESA-2020:4952)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4952 advisory. - freetype: Heap-based buffer overflow due to integer truncation in LoadSBitPng CVE-2020-15999 Note that Nessus has not tested for this issue but has instead...

Schneider Electric IGSS CGF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Schneider Electric IGSS CGF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric IGSS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

EulerOS 2.0 SP8 : sudo (EulerOS-SA-2021-1173)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sudo before 1.9.5p2 has a Heap-based Buffer Overflow,allowing privilege escalation to root via 'sudoedit -s' and a command-line argument that ends...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Description Sudo before 1.9.5p2 has a Heap-based...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 PoC Introduction This is an exploit for the...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 checking CVE-2021-3156 vulnerability & patchi...

CVE-2020-27829

A heap based buffer overflow in coders/tiff.c may result in program crash and denial of service...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Note: These instructions are my own and not...

CVE-2021-3345

gcrymdblockwrite in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value. It is recommended to upgrade to 1.9.1 or later...

CVE-2021-3345

gcrymdblockwrite in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value. It is recommended to upgrade to 1.9.1 or later...

CVE-2021-3345

The CVE-2021-3345 entry concerns Libgcrypt: the function gcry_md_block_write in cipher/hash-common.c on Libgcrypt 1.9.0 suffers a heap-based buffer overflow when the digest final function handles a large count. The identified remediation is to upgrade to Libgcrypt 1.9.1 or later. Impact details a...

CentOS 8 : SDL (CESA-2019:3951)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3951 advisory. - SDL: heap-based buffer overflow in SDL blit functions in video/SDLblit.c CVE-2019-13616 Note that Nessus has not tested for this issue but has instead relied...