11348 matches found
Ubuntu: Security Advisory (USN-4968-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-22543 Improper memory handling in Linux KVM
An issue was discovered in Linux: KVM through Improper handling of VMIO|VMPFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and ca...
Oracle Linux 8 : GNOME (ELSA-2021-1586)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1586 advisory. - Fix CVE-2019-13012 Resolves: 1728632 glibmm24 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
Denial Of Service (DoS)
Shiftfs is vulnerable to denial of service. The vulnerability exists due to improper handling of faults occurrence during copyfromuser resulting in a double-free or memory not being freed situation...
webkitgtk: type confusion may lead to arbitrary code execution
A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution...
EulerOS 2.0 SP8 : cups (EulerOS-SA-2021-1867)
According to the version of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - CUPS printing system provides a portable printing layer for UNIXr operating systems. It has been developed by Apple Inc. to promote a standard printi...
USN-4957-1 djvulibre vulnerabilities
It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a specially crafted DjVu file, a remote attacker could cause applications to hang or crash, resulting in a denial of service, or possibly execute arbitrary co...
Type Confusion
webkit2gtk:edge is vulnerable to a type confusion. It is due to lack of memory handling which allows a maliciously crafted web content to arbitrary code execution...
ezXML Heap Buffer Overflow Vulnerability
ezXML is a C library for parsing XML documents . A heap buffer overflow vulnerability exists in libezxml.a in ezXML version 0.8.6. The vulnerability stems from a memory handling error performed by the ezxmldecode function when parsing a specially crafted XML file. An attacker could exploit this...
CVE-2021-31598
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmldecode performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow...
CVE-2021-31598
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmldecode performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow...
CVE-2021-31598
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmldecode performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow...
CVE-2021-31598
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmldecode performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow...
UBUNTU-CVE-2021-31598
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmldecode performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow...
Heap overflow
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmldecode performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow...
CVE-2021-31598
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmldecode performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow...
CVE-2021-31598
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmldecode performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow...
CVE-2021-31598
CVE-2021-31598 affects ezXML 0.8.6 (libezxml.a) and arises from incorrect memory handling in ezxml_decode() while parsing crafted XML files, causing a heap-based buffer overflow. The issue is consistently cited across multiple advisories (SUSE/OpenSUSE SUSE-SU-2021:3815/3804/3805, 3873-1, openSUS...
About the security content of iTunes 12.11.3 for Windows
About the security content of iTunes 12.11.3 for Windows This document describes the security content of iTunes 12.11.3 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
The vulnerability of the Windows Event Tracing service allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows Event Tracing service is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...