SUSE-SU-2025:20560-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2025-5914: Fixed double free due to an integer overflow in the archivereadformatrarseekdata function bsc1244272 - CVE-2025-5915: Fixed heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c bsc1244273 -...

Security update for libarchive

This update for libarchive fixes the following issues: CVE-2025-5914: Fixed double free due to an integer overflow in the archivereadformatrarseekdata function bsc1244272 CVE-2025-5915: Fixed heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c bsc1244273 CVE-2025-5916:...

SUSE-SU-2025:02718-2 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2025-5914: Fixed double free due to an integer overflow in the archivereadformatrarseekdata function bsc1244272 - CVE-2025-5915: Fixed heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c bsc1244273 -...

curl: Curl parse_connect_to_string Heap-Overread Leading to Denial of Service via CURLOPT_CONNECT_TO

Summary: A heap-buffer-overread occurs in Curl's parseconnecttostring function when using the CURLOPTCONNECTTO option with crafted input. This can lead to a segmentation fault and crash of the application, resulting in a denial-of-service. The issue is triggered by malformed host strings containi...

Linux Distros Unpatched Vulnerability : CVE-2024-27280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods o...

Linux Distros Unpatched Vulnerability : CVE-2022-23547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN,...

Linux Distros Unpatched Vulnerability : CVE-2022-23537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN,...

Linux Distros Unpatched Vulnerability : CVE-2019-10871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc. CVE-2019-10871...

Linux Distros Unpatched Vulnerability : CVE-2025-4207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte...

BIT-NGINX-2025-53859 NGINX ngx_mail_smtp_module vulnerability

NGINX Open Source and NGINX Plus have a vulnerability in the ngxmailsmtpmodule that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happe...

Linux Distros Unpatched Vulnerability : CVE-2019-9030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a stack-based buffer over-read in MatVarReadNextInfo5 in mat5.c...

Linux Distros Unpatched Vulnerability : CVE-2022-22816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path. CVE-2022-22816 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2018-18196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in RIFF::List::GetListTypeString in RIFF.cpp. CVE-2018-18196 Note that Nessus...

Sofia-SIP Heap Buffer Overflow DoS

The vulnerability of the Sofia-SIP user agent library session initiation protocol relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Sofia-SIP Heap Buffer Overflow DoS

The vulnerability of the Sofia-SIP user agent library session initiation protocol relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gfodfac4cfgdsiv1 function in the MP4Box utility of the GPAC multimedia platform involves reading memory beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Intel PROSet/Wireless WiFi Buffer Overflow DoS

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to reading beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2018-19759

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap-based buffer over-read at stbimagewrite.h function: stbiwritepngtomem in libsixel 1.8.2 that will cause a denial of service. CVE-2018-19759 Note...

Linux Distros Unpatched Vulnerability : CVE-2025-32460

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call. CVE-2025-32460 Note tha...

Linux Distros Unpatched Vulnerability : CVE-2018-8809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In radare2 2.4.0, there is a heap-based buffer over-read in the dalvikop function of analdalvik.c. Remote attackers could leverage this vulnerability to cause a...