The vulnerability of the Libarchive library in the Windows operating system, which allows a hacker to cause a service failure

The vulnerability of the Libarchive library in the Windows operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

OESA-2025-2272 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: scsi: core: ufs: Fix a hang in the error handler. ufshcderrhandlingprepare calls ufshcdrpmgetsync. The latter function can only succeed if UFSHCDEHINPROGRESS is...

ROS-20250911-03

A vulnerability in the GIMP graphical editor is related to integer overflow. Exploitation of the vulnerability could allow an attacker to execute arbitrary code on the target system A vulnerability in the GIMP graphical editor is related to an operation exceeding buffer boundaries in memory when...

ROS-20250911-02

Vulnerability of the rterawcksummbuf function of the vhost library of the DPDK suite of libraries and drivers for fast packet processing is related to the operation exceeding the memory buffer boundary while processing the len parameter. DPDK packet processing is related to the operation exceedin...

The vulnerability of the begfield() function in the sort component of the GNU Core Utilities system utilities allows a hacker to disclose protected information and cause a service failure.

The vulnerability of the begfield function in the sort component of the GNU Core Utilities set of system utilities is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose confidential information and cause...

SUSE CVE-2025-39691

In the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free when call bhread helper There's issue as follows: BUG: KASAN: stack-out-of-bounds in endbufferreadsync+0xe3/0x110 Read of size 8 at addr ffffc9000168f7f8 by task swapper/3/0 CPU: 3 UID: 0 PID: 0 Comm...

The vulnerability of the SRBRoot::addTag() function in the Unicode-based library (ICU) allows a malicious actor to execute arbitrary code and cause service failure.

The vulnerability of the SRBRoot::addTag function in the Unicode-based ICU library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code and cause service failures...

The vulnerability of the elf_gc_sweep() function in the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the elfgcsweep function in the GNU Binutils development environment is related to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

Advisory ROSA-SA-2025-2976

Software: rsync 3.4.1 OS: ROSA-CHROME unaffected versions = rsync-3.4.1-1 affected versions rsync-3.4.1-1 CVE-ID: CVE-2024-12084 BDU-ID: 2025-00378 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the rsyncd daemon of the Rsync file transfer and synchronization utility is related to an operation...

Linux Distros Unpatched Vulnerability : CVE-2025-39691

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/buffer: fix use-after-free when call bhread helper There's issue as follows: BUG: KASAN: stack-out- of-bounds in endbufferreadsync+0xe3/0x110 Read of size 8...

usb: xhci: Fix isochronous Ring Underrun/Overrun event handling

...

Linux Distros Unpatched Vulnerability : CVE-2020-7928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects...

Linux Distros Unpatched Vulnerability : CVE-2023-24286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter. CVE-2023-24286 Note that Ness...

Linux Distros Unpatched Vulnerability : CVE-2023-24291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter. CVE-2023-24291 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2023-24288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service DoS via creating an excessive amount of save states...

Linux Distros Unpatched Vulnerability : CVE-2023-24283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of Service DoS via a...

Linux Distros Unpatched Vulnerability : CVE-2023-24285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed...

Linux Distros Unpatched Vulnerability : CVE-2022-2320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of prope...

Linux Distros Unpatched Vulnerability : CVE-2023-24287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the M command. CVE-2023-24287 Note that Nessus relies on the...

The vulnerability in Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird arises from performing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird are related to the execution of operations beyond the buffer boundaries in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...