MGASA-2023-0278 Updated giflib packages fix security vulnerability

The updated packages fix a security vulnerability: giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c. CVE-2023-39742...

Fedora 37 : giflib (2023-88f7d670fe)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-88f7d670fe advisory. Add patch for CVE-2023.39742. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

Amazon Linux 2 : mariadb (ALASMARIADB10.5-2023-002)

The version of mariadb installed on the remote host is prior to 10.5.10-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2MARIADB10.5-2023-002 advisory. MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepareinplaceaddvirtual at...

Medium: mariadb

Issue Overview: MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepareinplaceaddvirtual at /storage/innobase/handler/handler0alter.cc. CVE-2022-32081 MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-getrefcount == 0 in dict0dict.cc...

PT-2023-36038 · Icu · Icu

Name of the Vulnerable Software and Affected Versions: icu 74 affected versions not specified Description: The issue is related to a crash in the icu 74 library, specifically in the UnicodeString class. The crash occurs when the copyFrom function is called, leading to a segmentation fault on an...

OESA-2023-1675 giflib security update

giflib is a library of gif images and provides utilities for processing images. Security Fixes: giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.CVE-2023-39742...

AlmaLinux 8 : mariadb:10.3 (ALSA-2023:5259)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:5259 advisory. mariadb: segmentation fault via the component subselect CVE-2022-32084 mariadb: server crash in JOINCACHE::free or in copyfields CVE-2022-32091 mariadb:...

Oracle Linux 8 : mariadb:10.3 (ELSA-2023-5259)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-5259 advisory. galera 25.3.37-1 - Rebase to 25.3.37 Judy 1.0.5-18.0.1 - Rebuild Orabug: 31667911 mariadb 3:10.3.39-1 - MariaDB 10.3.32 socat: E Failed to set SNI host...

Medium: ImageMagick

Issue Overview: A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage in coders/svg.c. This issue is due to not checking the return value from libxml2's xmlCreatePushParserCtxt and uses the value directly, which leads to a crash and segmentation...

Debian dla-3572 : libyang-cpp-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3572 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3572-1 [email protected]...

Amazon Linux 2023 : nasm, nasm-rdoff (ALAS2023-2023-354)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-354 advisory. A Segmentation Fault issue discovered in in ieeesegment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file. CVE-2020-21528...

Medium: nasm

Issue Overview: A Segmentation Fault issue discovered in in ieeesegment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file. CVE-2020-21528 Affected Packages: nasm Issue Correction: Run dnf update nasm --releasever...

The vulnerability in the getarg.c component of the GIFLIB library allows a hacker to cause a service failure.

The vulnerability of the getarg.c component in the GIFLIB library is related to a segmentation error. Exploiting this vulnerability can allow an attacker to cause a service failure...

mariadb: segmentation fault via the component sub_select

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect...

RHEL 8 : mariadb:10.3 (RHSA-2023:5259)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5259 advisory. MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded ...

OESA-2023-1626 nasm security update

NASM is the Netwide Assembler, a free portable assembler for the Intel 80x86 microprocessor series, using primarily the traditional Intel instruction mnemonics and syntax. It also provides tools in RDOFF binary format, includes linker, library manager, loader, and information dump. Security Fixes...

PT-2023-36013 · Wasmedge · Wasmedge

Name of the Vulnerable Software and Affected Versions: WasmEdge affected versions not specified Description: The issue is related to a crash that occurs due to a segmentation fault on an unknown address. The crash happens in the FunctionCompiler::compileReturn function, which is part of the...

CLSA-2023-1694538670 Fix CVE(s): CVE-2022-40433

CVE-2022-40433: Segmentation fault in ciMethodBlocks::makeblockatint...

CLSA-2023-1694538145 Fix CVE(s): CVE-2022-40433

CVE-2022-40433: Segmentation fault in ciMethodBlocks::makeblockatint...

CLSA-2023-1694538006 Fix CVE(s): CVE-2022-47695

SECURITY UPDATE: segmentation fault in objdump.c comparesymbols - debian/patches/CVE-2022-47695.patch: test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47695...