EulerOS 2.0 SP11 : nasm (EulerOS-SA-2023-3253)

According to the versions of the nasm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A Segmentation Fault issue discovered in in ieeesegment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial o...

EulerOS 2.0 SP11 : nasm (EulerOS-SA-2023-3281)

According to the versions of the nasm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A Segmentation Fault issue discovered in in ieeesegment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial o...

EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2023-3036)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file...

EulerOS Virtualization 2.11.0 : libtiff (EulerOS-SA-2023-3380)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via...

EulerOS 2.0 SP10 : nasm (EulerOS-SA-2023-3188)

According to the versions of the nasm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A Segmentation Fault issue discovered in in ieeesegment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial o...

CVE-2023-31488

Hyland Perceptive Filters releases before 2023-12-08 e.g., 11.4.0.2647, as used in Cisco IronPort Email Security Appliance Software, Cisco Secure Email Gateway, and various non-Cisco products, allow attackers to trigger a segmentation fault and execute arbitrary code via a crafted document...

CVE-2023-31488

Hyland Perceptive Filters releases before 2023-12-08 e.g., 11.4.0.2647, as used in Cisco IronPort Email Security Appliance Software, Cisco Secure Email Gateway, and various non-Cisco products, allow attackers to trigger a segmentation fault and execute arbitrary code via a crafted document...

Code injection

Hyland Perceptive Filters releases before 2023-12-08 e.g., 11.4.0.2647, as used in Cisco IronPort Email Security Appliance Software, Cisco Secure Email Gateway, and various non-Cisco products, allow attackers to trigger a segmentation fault and execute arbitrary code via a crafted document...

Hyland Document Filters Security Vulnerability

Hyland Document Filters is a software development kit from Hyland that provides document inspection, extraction, and conversion. A security vulnerability exists in versions of Hyland Document Filters prior to 2023-12-08. An attacker could exploit the vulnerability to trigger a segmentation error...

CVE-2023-31488

Hyland Perceptive Filters releases before 2023-12-08 e.g., 11.4.0.2647, as used in Cisco IronPort Email Security Appliance Software, Cisco Secure Email Gateway, and various non-Cisco products, allow attackers to trigger a segmentation fault and execute arbitrary code via a crafted document...

CVE-2024-21664 Parsing JSON serialized payload without protected field can lead to segfault

jwx is a Go module implementing various JWx JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE technologies. Calling jws.Parse with a JSON serialized payload where the signature field is present while protected is absent can lead to a nil pointer dereference. The vulnerability can be used to crash/DOS ...

Medium: ncurses

Issue Overview: NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Affected Packages: ncurses Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2...

Amazon Linux 2 : ncurses (ALAS-2024-2380)

The version of ncurses installed on the remote host is prior to 6.0-8.20170212. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2380 advisory. NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Tenable ha...

Medium: ncurses

Issue Overview: NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Affected Packages: ncurses Issue Correction: Run dnf update ncurses --releasever 2023.3.20240108 to update your system. New Packages: aarch64: ...

Medium: ncurses

Issue Overview: NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Affected Packages: ncurses Issue Correction: Run dnf update ncurses --releasever 2023.3.20240108 or dnf update --advisory ALAS2023-2024-466 --releasever 2023.3.2024010...

Amazon Linux 2023 : ncurses, ncurses-base, ncurses-c++-libs (ALAS2023-2024-466)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-466 advisory. NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Tenable has extracted the preceding description block directly from the tested product...

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.

...

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c.

...

OESA-2023-1969 ncurses security update

The ncurses new curses library is a free software emulation of curses in System V Release 4.0 SVr4, and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr...

GLSA-202312-09 : NASM: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202312-09 NASM: Multiple Vulnerabilities - In Netwide Assembler NASM 2.14.02, there is a use-after-free in pastetokens in asm/preproc.c. CVE-2019-8343 - A Segmentation Fault issue discovered in in ieeesegment function in outieee.c...