Lucene search
+L

989 matches found

OSV
OSV
added 2024/02/28 9:15 a.m.5 views

CVE-2021-46989

In the Linux kernel, the following vulnerability has been resolved: hfsplus: prevent corruption in shrinking truncate I believe there are some issues introduced by commit 31651c607151 "hfsplus: avoid deadlock on file truncation" HFS+ has extent records which always contains 8 extents. In case the...

5.5CVSS7.7AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2024/02/28 9:15 a.m.33 views

CVE-2021-46989

In the Linux kernel, the following vulnerability has been resolved: hfsplus: prevent corruption in shrinking truncate I believe there are some issues introduced by commit 31651c607151 "hfsplus: avoid deadlock on file truncation" HFS+ has extent records which always contains 8 extents. In case the...

5.5CVSS6.3AI score0.0024EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/01/01 12:0 a.m.5 views

PT-2025-6691

Name of the Vulnerable Software and Affected Versions GNU grub2 affected versions not specified Description The issue concerns an out-of-bounds write in the strcpy function within the hfs.c file of the GNU grub2 software, specifically affecting the hfs filesystem module. Recommendations At the...

8.8CVSS7.2AI score0.00735EPSS
SaveExploits1References147
Tenable Nessus
Tenable Nessus
added 2023/10/27 12:0 a.m.73 views

QNAP QTS / QuTS hero Multiple Vulnerabilities in ClamAV (QSA-23-26)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by multiple vulnerabilities as referenced in the QSA-23-26 advisory. - A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7and earlier could allow an...

9.8CVSS8.3AI score0.29314EPSS
SaveExploits5References3
Mageia
Mageia
added 2023/09/11 1:7 p.m.49 views

Updated clamav packages fix security vulnerability

A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is...

7.5CVSS6.7AI score0.02599EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/11 1:7 p.m.9 views

MGASA-2023-0257 Updated clamav packages fix security vulnerability

A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is...

7.5CVSS7.3AI score0.02599EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/09/11 12:0 a.m.25 views

Amazon Linux AMI : clamav (ALAS-2023-1820)

The version of clamav installed on the remote host is prior to 0.103.9-1.55. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1820 advisory. A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated,...

7.5CVSS6.3AI score0.00883EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2023/09/11 12:0 a.m.13 views

Mageia: Security Advisory (MGASA-2023-0257)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02599EPSS
SaveExploits0References3
OSV
OSV
added 2023/09/08 10:4 p.m.7 views

USN-6342-2 linux-azure, linux-azure-4.15 vulnerabilities

Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information. CVE-2023-20593 Zheng Zhang discovered that the device-mapper implementation in the Linux kernel...

7.8CVSS7.1AI score0.05188EPSS
SaveExploits1References7
Ubuntu
Ubuntu
added 2023/09/08 8:18 p.m.69 views

USN-6342-2: Linux kernel (Azure)

Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information. CVE-2023-20593 Zheng Zhang discovered that the device-mapper implementation in the Linux kernel...

7.8CVSS7.7AI score0.05188EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2023/09/08 12:0 a.m.122 views

Amazon Linux 2023 : clamav, clamav-data, clamav-devel (ALAS2023-2023-331)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-331 advisory. A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

7.5CVSS6.2AI score0.00883EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/09/08 12:0 a.m.25 views

Amazon Linux 2 : clamav (ALAS-2023-2233)

The version of clamav installed on the remote host is prior to 0.103.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2233 advisory. A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated,...

7.5CVSS6.3AI score0.00883EPSS
SaveExploits0References4
Amazon
Amazon
added 2023/09/07 12:0 a.m.6 views

Important: clamav

Issue Overview: A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a...

7.5CVSS6.8AI score0.00883EPSS
SaveExploits0
Amazon
Amazon
added 2023/09/07 12:0 a.m.23 views

Important: clamav

Issue Overview: A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a...

7.5CVSS6.3AI score0.00883EPSS
SaveExploits0
OSV
OSV
added 2023/09/06 12:31 a.m.8 views

USN-6342-1 linux, linux-aws, linux-aws-hwe, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities

Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information. CVE-2023-20593 Zheng Zhang discovered that the device-mapper implementation in the Linux kernel...

7.8CVSS7.2AI score0.05188EPSS
SaveExploits1References7
Ubuntu
Ubuntu
added 2023/09/06 12:31 a.m.81 views

USN-6342-1: Linux kernel vulnerabilities

Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information. CVE-2023-20593 Zheng Zhang discovered that the device-mapper implementation in the Linux kernel...

7.8CVSS7.7AI score0.05188EPSS
SaveExploits1
Amazon
Amazon
added 2023/09/05 12:0 a.m.34 views

Important: clamav

Issue Overview: A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a...

7.5CVSS6.3AI score0.00883EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/09/04 12:0 a.m.34 views

ClamAV < 0.103.9 / 1.0.x < 1.0.2 / 1.1.x < 1.1.1 DoS

A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a file is...

7.5CVSS6.3AI score0.00883EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/02 11:5 a.m.3 views

OESA-2023-1558 clamav security update

Clam AntiVirus clamav is an open source antivirus engine for detecting trojans, viruses, malware and other malicious threats. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command...

7.5CVSS7AI score0.00883EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/02 11:5 a.m.5 views

OESA-2023-1560 clamav security update

Clam AntiVirus clamav is an open source antivirus engine for detecting trojans, viruses, malware and other malicious threats. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command...

7.5CVSS7AI score0.00883EPSS
SaveExploits0References2
Rows per page
Query Builder