RHEL 9 : perl-JSON-XS (RHSA-2025:17162)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:17162 advisory. This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach t...

Moderate: perl-JSON-XS security update

This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. Security Fixes: JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 For...

[SECURITY] [DLA 4317-1] libjson-xs-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4317-1 [email protected] https://www.debian.org/lts/security/ Paride Legovini September 30, 2025 https://wiki.debian.org/LTS -...

Medium: perl-JSON-XS

Issue Overview: JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact CVE-2025-40928 Affected Packages: perl-JSON-XS Note: This advisory is applicable to Amazon Linux 2 AL2...

assimp:assimp_fuzzer: Segv on unknown address in aiMaterial::~aiMaterial

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5064930471772160 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

ncurses: segfaulting OOB read

A segmentation fault vulnerability was found in ncurses's convertstrings function of tinfo/readentry.c file. This flaw occurs due to corrupted terminfo data, triggering an out-of-bounds read error...

RHEL 9 : ncurses (RHSA-2025:16414)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16414 advisory. The ncurses new curses library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses...

CVE-2023-53217

In the Linux kernel, the following vulnerability has been resolved: nubus: Partially revert proccreatesingledata conversion The conversion to proccreatesingledata introduced a regression whereby reading a file in /proc/bus/nubus results in a seg fault: grep -r . /proc/bus/nubus/e/ Data read fault...

UBUNTU-CVE-2023-53217

In the Linux kernel, the following vulnerability has been resolved: nubus: Partially revert proccreatesingledata conversion The conversion to proccreatesingledata introduced a regression whereby reading a file in /proc/bus/nubus results in a seg fault: grep -r . /proc/bus/nubus/e/ Data read fault...

CVE-2023-53217 nubus: Partially revert proc_create_single_data() conversion

In the Linux kernel, the following vulnerability has been resolved: nubus: Partially revert proccreatesingledata conversion The conversion to proccreatesingledata introduced a regression whereby reading a file in /proc/bus/nubus results in a seg fault: grep -r . /proc/bus/nubus/e/ Data read fault...

serde_yml crate is unsound and unmaintained

Using serdeyml::ser::Serializer.emitter can cause a segmentation fault, which is unsound. The GitHub project for serdeyml was archived after unsoundness issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative. Recommended alternatives -...

GHSA-HHW4-XG65-FP2X serde_yml crate is unsound and unmaintained

Using serdeyml::ser::Serializer.emitter can cause a segmentation fault, which is unsound. The GitHub project for serdeyml was archived after unsoundness issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative. Recommended alternatives -...

hoextdown:hoedown_fuzzer: Segv on unknown address in hoedown_autolink__url

Project: https://github.com/kjdev/hoextdown.git Detailed Report: https://oss-fuzz.com/testcase?key=6317952367656960 Project: hoextdown Fuzzing Engine: afl Fuzz Target: hoedownfuzzer Job Type: aflasanhoextdown Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

libplist:bplist_fuzzer: Segv on unknown address in parse_bin_node_at_index

Project: https://github.com/libimobiledevice/libplist.git Detailed Report: https://oss-fuzz.com/testcase?key=5050083860348928 Project: libplist Fuzzing Engine: afl Fuzz Target: bplistfuzzer Job Type: aflasanlibplist Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State...

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

...

kernel: drm/gem: Acquire references on GEM handles for framebuffers

In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer. This leads to the release of the dma-buf backing the buffer object, if any. 1...

Linux Distros Unpatched Vulnerability : CVE-2022-35108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWFTools commit 772e55a2 was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc. CVE-2022-35108 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2024-26337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - swftools v0.9.2 was discovered to contain a segmentation violation via the function sfont at swftools/src/swfc.c. CVE-2024-26337 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2025-40929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or...

Linux Distros Unpatched Vulnerability : CVE-2022-35101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memset-vec- unaligned-erms.S. CVE-2022-35101 Note that Nessus relies ...