SUSE SLES12 Security Update : busybox (SUSE-SU-2023:3729-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3729-1 advisory. - CVE-2022-48174: Fixed stack overflow vulnerability. bsc1214538 Tenable has extracted the preceding description block directly from the SUS...

SUSE-SU-2023:3729-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2022-48174: Fixed stack overflow vulnerability. bsc1214538...

The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the fact that the execution of commands is carried out outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

PT-2023-5371 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 Description: The issue is related to a stack overflow in the dir setWanWifi function, which can be triggered via the statuscheckpppoeuser parameter. This can potentially allow a remote attacker to impact th...

SUSE-SU-2023:3670-1 Security update for python-brotlipy

This update for python-brotlipy fixes the following issues: - CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB bsc1175825...

Fedora 37 : libtommath (2023-f5680e3b4b)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f5680e3b4b advisory. Security fix for CVE-2023-36328 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 37 : flac (2023-bf8423a373)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-bf8423a373 advisory. Security fix for CVE-2020-22219 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Buffer overflow

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.10, FreeSWITCH allows authorized users to cause a denial of service attack by sending...

CVE-2023-32461

Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges...

PT-2023-23805 · Dell · Dell Precision Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge BIOS affected versions not specified Dell Precision BIOS affected versions not specified Description: A buffer overflow vulnerability exists, allowing a local malicious user with high privileges to potentially exploit it, leadi...

The vulnerability of the handle_interface_acl function in Milesight UR32L router software allows a hacker to execute arbitrary code.

The vulnerability of the handleinterfaceacl function in Milesight UR32L router microprogramming software arises due to a stack-based buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Oracle Linux 9 : flac (ELSA-2023-5048)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5048 advisory. 1.3.3-10.el92.1 - don't free memory that is still used after realloc error CVE-2020-22219 Tenable has extracted the preceding description block directly from th...

Amazon Linux AMI : poppler (ALAS-2023-1823)

The version of poppler installed on the remote host is prior to 0.26.5-43.25. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1823 advisory. Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause a denial of service...

SUSE-SU-2023:3529-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2022-48174: Fixed stack overflow vulnerability. bsc1214538...

SUSE-SU-2023:3528-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2023-3823: Fixed an issue with external entity loading in XML without enabling it. bsc1214106 - CVE-2023-3824: Fixed a buffer overflow in phardirread. bsc1214103...

SUSE-SU-2023:3518-1 Security update for exempi

This update for exempi fixes the following issues: - CVE-2020-18652: Fixed buffer overflow vulnerability in WEBPSupport.cpp bsc1214488...

Huawei EulerOS: Security Advisory for freetype (EulerOS-SA-2023-2682)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeRDP clear_decompress_bands_data function buffer overflow vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from a buffer overflow vulnerability that stems from the cleardecompressbandsdata function having no offset validation. An attacker could exploit this vulnerability to cause a denial...

Integer overflow

Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling realloc function in bngrow function...

CVE-2023-36328

Integer Overflow vulnerability in mpgrow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service DoS...