SUSE CVE-2021-32672

Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger's protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support 3.2 or newer...

SUSE SLES12 Security Update : squid (SUSE-SU-2024:1911-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1911-1 advisory. - CVE-2024-33427: Fixed possible buffer overread that could have led to a denial-of-service bsc1225417. Tenable has extracted the preceding...

SUSE SLES15 / openSUSE 15 Security Update : squid (SUSE-SU-2024:1896-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1896-1 advisory. - CVE-2024-33427: Fixed possible buffer overread that could have led to a denial-of-service bsc1225417. Tenable has extracted...

Windows SCSI Privilege Exploitation

The vulnerability of the Windows component for working with SCSI devices in Windows systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Moderate: Red Hat Security Advisory: ruby:3.1 security, bug fix, and enhancement update

An update for the ruby:3.1 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

ruby: Buffer overread vulnerability in StringIO

A buffer overread flaw was found in rubygem StringIO. The ungetbyte and ungetc methods on a StringIO object can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value...

SUSE-SU-2024:1911-1 Security update for squid

This update for squid fixes the following issues: - CVE-2024-33427: Fixed possible buffer overread that could have led to a denial-of-service bsc1225417...

SUSE-SU-2024:1896-1 Security update for squid

This update for squid fixes the following issues: - CVE-2024-33427: Fixed possible buffer overread that could have led to a denial-of-service bsc1225417...

RHEL 5 : radvd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - radvd: numerous buffer overread flaws in processra may lead to crash CVE-2011-3604 - radvd: temporary...

RHEL 6 : radvd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - radvd: numerous buffer overread flaws in processra may lead to crash CVE-2011-3604 - radvd: temporary...

RHEL 4 : radvd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - radvd: numerous buffer overread flaws in processra may lead to crash CVE-2011-3604 - radvd: temporary...

RHEL 5 : httpd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - httpd: modmime buffer overread CVE-2017-7679 - httpd: Weak Digest auth nonce generation in modauthdigest...

ruby:3.1 security, bug fix, and enhancement update

ruby 3.1.5-143 - Upgrade to Ruby 3.1.5. Resolves: RHEL-35748 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35749 - Fix RCE vulnerability with .rdocoptions in RDoc. Resolves: RHEL-35750 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35751...

RHEL 5 : libxslt (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libxslt: Heap overread due to an empty decimal-separator CVE-2016-4738 - libxslt: xsltCheckRead and...

RHEL 7 : libxslt (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libxslt: Invalid memory access leading to DoS at exsltDynMapFunction CVE-2016-4610 - libxslt: Heap overre...

ALSA-2024:3546 Moderate: ruby:3.1 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: ruby: RCE vulnerability with .rdocoptions in RDoc CVE-2024-27281 ruby: Buffer overread vulnerability in StringIO CVE-2024-27280...

RHEL 8 : ruby:3.1 (RHSA-2024:3546)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3546 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

RHEL 6 : libxslt (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libxslt: Heap overread due to an empty decimal-separator CVE-2016-4738 - libxslt: xsltCheckRead and...

Moderate: ruby:3.1 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: ruby: RCE vulnerability with .rdocoptions in RDoc CVE-2024-27281 ruby: Buffer overread vulnerability in StringIO CVE-2024-27280...

RHEL 8 : ldns (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ldns: heap overread vulnerability via zone file CVE-2020-19860 Note that Nessus has not tested for this issue but h...