5303 matches found
kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw
In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40eclearhw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Prevent the integer underflow by changing the...
Linux Distros Unpatched Vulnerability : CVE-2016-2347
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer underflow in the decodelevel3header function in lib/lhafileheader.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafte...
Linux Distros Unpatched Vulnerability : CVE-2017-8906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax in MulticoreWare x265 through 2.4, as used by the...
SUSE-SU-2025:20598-1 Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-4945: Fixed Integer Overflow in Cookie Expiration Date Handling bsc1243314 - CVE-2025-4948: Fixed Integer Underflow in soupmultipartnewfrommessage Leading to Denial of Service bsc1243332 - CVE-2025-4476: Fixed null pointer dereference...
Linux Distros Unpatched Vulnerability : CVE-2024-6285
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer Underflow Wrap or Wraparound vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassi...
Linux Distros Unpatched Vulnerability : CVE-2023-47360
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length. CVE-2023-47360 Note that Nessus relies on the...
CVE-2023-43683
An issue was discovered in Malwarebytes 4.6.14.326 and before 5.1.5.116 and Nebula 2020-10-21 and later. A Stack buffer out-of-bounds access exists because of an integer underflow when handling newline characters...
Linux Distros Unpatched Vulnerability : CVE-2025-4948
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web...
Linux Distros Unpatched Vulnerability : CVE-2023-38427
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in...
CVE-2023-43683
CVE-2023-43683 affects Malwarebytes 4.6.14.326 and earlier, up to 5.1.5.116, and Nebula 2020-10-21 and later. Root cause is a stack buffer out-of-bounds access caused by an integer underflow when handling newline characters. The impact is a memory access issue in the stack buffer. Remediation: up...
CVE-2023-43683
An issue was discovered in Malwarebytes 4.6.14.326 and before 5.1.5.116 and Nebula 2020-10-21 and later. A Stack buffer out-of-bounds access exists because of an integer underflow when handling newline characters...
Microsoft Teams Real Time Media Manager Integer Underflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Teams. Authentication is not required to exploit this vulnerability. The specific flaw exists within the real time media manager. The issue results from the lack of proper validation of...
EulerOS 2.0 SP13 : libsoup (EulerOS-SA-2025-1994)
According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages...
Azure Linux 3.0 Security Update: libsoup (CVE-2025-4948)
The version of libsoup installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4948 advisory. - A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly...
Linux Distros Unpatched Vulnerability : CVE-2023-42118
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network- adjacent attackers to execute arbitrary code on affected...
Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup
...
Linux Distros Unpatched Vulnerability : CVE-2025-38200
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i40e: fix MMIO write access to an invalid page in i40eclearhw When the device sends a specific input, an integer underflow can occur, leading to MMIO write acce...
Linux Distros Unpatched Vulnerability : CVE-2025-49112
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-size - prev-used. CVE-2025-49112 Note that Nessus relies on the...
NewStart CGSL MAIN 7.02 : gstreamer1-plugins-good Multiple Vulnerabilities (NS-SA-2025-0174)
The remote NewStart CGSL host, running version MAIN 7.02, has gstreamer1-plugins-good packages installed that are affected by multiple vulnerabilities: - GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function...
Adobe Illustrator Numeric Error Vulnerability (CNVD-2025-16549)
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A numeric error vulnerability exists in Adobe Illustrator that originates from an integer underflow and can be exploited by an attacker to cause arbitrary code to be executed...