13264 matches found
Medium: libsepol
Issue Overview: The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper. CVE-2021-36084 The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from verifymappermclassperms and hashtabmap...
Apache httpd -- Multiple vulnerabilities
The Apache httpd project reports: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with initial windows size 0 CVE-2023-31122: modmacro buffer over-read...
Ubuntu 18.04 ESM / 20.04 ESM : Simple DirectMedia Layer vulnerabilities (USN-5274-1)
The remote Ubuntu 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5274-1 advisory. It was discovered that Simple DirectMedia Layer library incorrectly handled memory when parsing certain specially crafted .BMP files. An...
Ubuntu 16.04 ESM / 18.04 ESM : SoundTouch vulnerabilities (USN-4826-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4826-1 advisory. It was discovered that SoundTouch incorrectly handled certain WAV files. A remote attacker could possibly use this issue to cause a denial of...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : MediaInfoLib vulnerabilities (USN-5237-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5237-1 advisory. It was discovered that MediaInfoLib incorrectly handled certain specially crafted files. An attacker could possibly use this issu...
Ubuntu 16.04 ESM / 18.04 ESM : libbson vulnerabilities (USN-4812-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4812-1 advisory. It was discovered that libbson incorrectly validated input length. An attacker could possibly use this issue to cause a denial of service. Th...
Ubuntu 16.04 ESM / 18.04 ESM : OpenCV vulnerabilities (USN-4818-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4818-1 advisory. It was discovered that OpenCV did not properly manage certain objects, leading to a divide-by-zero. If a user were tricked into loading a...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : MATIO vulnerability (USN-5185-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5185-1 advisory. It was discovered that MATIO incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service or...
SUSE: Security Advisory (SUSE-SU-2023:4070-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 ESM / 18.04 ESM : Oniguruma vulnerabilities (USN-5662-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5662-1 advisory. It was discovered that Oniguruma incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : Tcpreplay vulnerabilities (USN-5205-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5205-1 advisory. It was discovered that Tcpreplay incorrectly handled certain specially crafted packet capture input when processed by...
SUSE-SU-2023:4070-1 Security update for exiv2
This update for exiv2 fixes the following issues: - CVE-2018-19535: Fixed a heap-based buffer over-read which may cause a DoS via a crafted PNG file. bsc1117291...
Buffer Overflow
libfile.so is vulnerable to Buffer Overflow. The vulnerability exists due to the stack-based buffer over-read in the filecopystr function of funcs.c, which allows an attacker to cause an application crash through a maliciously crafted input...
Buffer Over-read
gpac is vulnerable to Buffer Over-read. This vulnerability allows an attacker to execute arbitrary code on a vulnerable system by exploiting a bug in the way gpac handles memory...
RSEC-2023-5 Infinite loop, memory leak, and heap-based buffer over-read vulnerabilities
The haven R package is exposed to multiple vulnerabilities due to issues in its underlying ReadStat library. The specific flaws include an infinite loop condition, a memory leak associated with an iconvopen call, and a heap-based buffer over-read via an unterminated string. Exploitation of these...
CVE-2023-33027 Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing rsn ies...
CVE-2023-33027 Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing rsn ies...
CVE-2023-33026 Buffer over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing a NAN management frame...