Denial Of Service (DoS)

upx is vulnerable to Denial Of Service DoS. The vulnerability exists due to the segmentation fault in the PackLinuxElf64::invertptdynamic function of plxelf.cpp which leads to invalid memory address access, allowing an attacker to cause an application crash...

Updated advancecomp packages fix security vulnerability

Segmentation fault on invalid MNG size...

MGASA-2023-0041 Updated advancecomp packages fix security vulnerability

Segmentation fault on invalid MNG size...

PT-2023-36334 · Mageia · Advancecomp

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue involves a segmentation fault that occurs when an invalid MNG size is encountered. Recommendations: At the moment, there is no information about a newer version that contains ...

Out of Range Pointer offset in mb_charlen of mbyte.c

Description Out of Range Pointer offset in mbcharlen of mbyte.c Vim Version git log commit 78012f55faf7444e554c0a97a589d99fa215bea9 HEAD - master, tag: v9.0.1275, origin/master, origin/HEAD POC ./vim -u NONE -X -Z -e -s -S poc01.dat -c ':qa!' Segmentation Fault GDB gdb ./vim gdb run -u NONE -X -Z...

Exploit for Classic Buffer Overflow in N-Prolog_Project N-Prolog

Description for CVE-2022-43343 N-Prolog v1.91 was discovered...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : AdvanceCOMP vulnerabilities (USN-5838-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5838-1 advisory. It was discovered that AdvanceCOMP did not properly manage memory while performing read operations on MNG file. If a...

Exploit for Double Free in Simplenetwork_Project Simplenetwork

Description of CVE-2022-36234 SimpleNetwork TCP Server commit...

Huawei EulerOS: Security Advisory for gmp (EulerOS-SA-2023-1255)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.2 : gmp (EulerOS-SA-2023-1255)

According to the versions of the gmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU Multiple Precision Arithmetic Library GMP through 6.2.1 has an mpz/inpraw.c integer overflow and resultant buffer overflow via...

Fedora 37 : advancecomp (2023-f685c3dcc5)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-f685c3dcc5 advisory. Update to 2.5 close RHBZ2162990; fix RHBZ2161641: Fix segmentation fault on invalid MNG size Tenable has extracted the preceding description block directly...

EulerOS Virtualization 3.0.2.2 : e2fsprogs (EulerOS-SA-2023-1251)

According to the versions of the e2fsprogs package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly...

SUSE SLES15: libfreebl3 / libfreebl3-32bit / libfreebl3-hmac / etc (SUSE-SU-2023:0130-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0130-1 advisory. - CVE-2022-3479: Fixed a potential crash that could be triggered when a server requested a client authentication certificate, but t...

Oracle Linux 9 : libxml2 (ELSA-2023-0338)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0338 advisory. - Fix CVE-2022-40303 2136564 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

openSUSE 15 Security Update : upx (openSUSE-SU-2023:0031-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0031-1 advisory. - A Segmentation fault was found in UPX in PackLinuxElf64::invertptdynamic in plxelf.cpp. An attacker with a crafted input file allows invalid memory...

OPENSUSE-SU-2023:0031-1 Security update for upx

upx was updated to fix the following issues: - CVE-2023-23457: Fixed a segmentation fault when processing malicious elf files boo1207122 Update to release 4.0.1 Fix crash when a linux/armeb LZMA-packed binary unpacks itself. Resolve 'CantPackException: bad ElfXXShdrs' with staticly-linked program...

keylime bug fix and enhancement update

An update is available for keylime. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Keylime is a TPM based highly scalable remote boot attestation and runtime...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service. The vulnerability is due to a segmentation fault in the gfsmloadinitswf function of swfparse.c file, which allows an attacker to send crafted files into the system causing an application crash...

Fedora 37 : upx (2023-89fdc22ace)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-89fdc22ace advisory. Patches for CVE-2023-23456 and CVE-2023-23457 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

wolfSSL 5.5.0 Session Resumption Denial Of Service Vulnerability

wolfSSL versions prior to 5.5.0 suffer from a denial of service condition related to session resumption. When a TLS 1.3 client connects to a wolfSSL server and SSLclear is called on its session, the server crashes with a segmentation fault. The bug occurs after a client performs a handshake again...