RHCOS 4 : Red Hat OpenShift Enterprise (RHSA-2023:3914)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3914 advisory. - golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString CVE-2022-23772 - golang:...

CVE-2023-31274

AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory resulting in throttled processing of new PI Data Archive events and a partial denial-of-service...

Race condition

AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory resulting in throttled processing of new PI Data Archive events and a partial denial-of-service...

CVE-2023-31274 Missing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server

AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory resulting in throttled processing of new PI Data Archive events and a partial denial-of-service...

CVE-2023-31274 Missing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server

AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory resulting in throttled processing of new PI Data Archive events and a partial denial-of-service...

AVEVA PI Server

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : AVEVA Equipment : PI Server Vulnerabilities : Improper Check or Handling of Exceptional Conditions, Missing Release of Resource after Effective Lifetime 2. RISK EVALUATION Successful...

PT-2024-12265

Name of the Vulnerable Software and Affected Versions AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior Description The issue allows an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory, resulting in throttled processing of new PI Data Archiv...

EulerOS Virtualization 2.11.1 : binutils (EulerOS-SA-2023-3354)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangletype in...

EulerOS Virtualization 2.9.0 : binutils (EulerOS-SA-2024-1003)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function...

EulerOS 2.0 SP11 : binutils (EulerOS-SA-2023-3024)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangletype in rust-demangle.c...

EulerOS 2.0 SP9 : binutils (EulerOS-SA-2023-3324)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at...

EulerOS Virtualization 2.9.1 : binutils (EulerOS-SA-2024-1029)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function...

EulerOS 2.0 SP9 : binutils (EulerOS-SA-2023-3292)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at...

EulerOS Virtualization 2.11.0 : binutils (EulerOS-SA-2023-3373)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangletype in...

EulerOS Virtualization 2.10.0 : binutils (EulerOS-SA-2023-3462)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37. CVE-2021-46174 - An issue was discovered function...

EulerOS 2.0 SP10 : binutils (EulerOS-SA-2023-3200)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37. CVE-2021-46174 - An issue was discovered function stabdemanglev3arg ...

EulerOS 2.0 SP11 : binutils (EulerOS-SA-2023-3001)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangletype in rust-demangle.c...

EulerOS 2.0 SP10 : binutils (EulerOS-SA-2023-3165)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37. CVE-2021-46174 - An issue was discovered function stabdemanglev3arg ...

USN-6581-1: GNU binutils vulnerabilities

It was discovered that GNU binutils was not properly performing bounds checks in several functions, which could lead to a buffer overflow. An attacker could possibly use this issue to cause a denial of service, expose sensitive information or execute arbitrary code. CVE-2022-44840, CVE-2022-45703...

Uncontrolled Resource Consumption

libspreadsheet-parsexlsx-perl is vulnerable to out-of-memory. The vulnerability is due to there is no constraints on merged cells in its memoize implementation, leading to excessive memory consumption when parsing crafted XLSX documents. This potentially leads to Denial of service...