Important: freetype

Issue Overview: A heap buffer overflow leading to out-of-bounds write was found in freetype. Memory allocation based on truncated PNG width and height values allows for an out-of-bounds write to occur in application memory when an attacker supplies a specially crafted TTF file. CVE-2020-15999 A...

Low: unzip

Issue Overview: A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution. CVE-2021-4217 A flaw was found i...

Medium: xmlsec1

Issue Overview: An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a...

Medium: e2fsprogs

Issue Overview: An out-of-bounds read/write vulnerability was found in e2fsprogs. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem. CVE-2022-1304 Affected Packages: e2fsprogs Issue Correction: Run dnf update e2fsprogs --releasever...

SIGSEGV at libr/bin/p/bin_coff.c:509 in patch_relocs()

Description radare2 5.8.2 misparses symbol information in COFF files, causing a segmentation fault in patchrelocs at libr/bin/p/bincoff.c:509 Proof of Concept input.bin 00000000: 6603 e846 4058 6458 4036 5858 5858 5868 f..F@XdX@6XXXXXh 00000010: 5858 7063 5858 5840 0038 00de 57ff ffff...

Amazon Linux 2023 : openjpeg2, openjpeg2-devel, openjpeg2-tools (ALAS2023-2023-040)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-040 advisory. There is a flaw in the opj2compress program in openjpeg2. An attacker who is able to submit a large number of image files to be processed in a directory by opj2compress, could trigger a heap...

Amazon Linux 2023 : e2fsprogs, e2fsprogs-devel, e2fsprogs-libs (ALAS2023-2023-044)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-044 advisory. An out-of-bounds read/write vulnerability was found in e2fsprogs. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem. CVE-2022-1304 Tenable...

Amazon Linux 2023 : gmp, gmp-c++, gmp-devel (ALAS2023-2023-033)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-033 advisory. A flaw was found in gmp. An integer overflow vulnerability could allow an attacker to input an integer value leading to a crash. The highest threat from this vulnerability is to system availability...

Amazon Linux 2023 : fribidi, fribidi-devel (ALAS2023-2023-069)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-069 advisory. A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory...

CBL Mariner 2.0 Security Update: mariadb (CVE-2022-27446)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27446 advisory. - MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...

CBL Mariner 2.0 Security Update: e2fsprogs (CVE-2022-1304)

The version of e2fsprogs installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1304 advisory. - An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentatio...

CBL Mariner 2.0 Security Update: mariadb (CVE-2022-27444)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27444 advisory. - MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...

CBL Mariner 2.0 Security Update: mariadb (CVE-2022-27452)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27452 advisory. - MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...

CBL Mariner 2.0 Security Update: mariadb (CVE-2022-27449)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27449 advisory. - MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41891)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41891 advisory. - TensorFlow is an open source platform for machine learning. If tf.rawops.TensorListConcat is given...

MGASA-2023-0091 Updated jasper packages fix security vulnerability

Memory leak in function cmdoptsparse that can cause a crash or segmentation fault. CVE-2022-2963...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the segmentation fault in the library, which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the null pointer dereference in the GFErr gfbifsdecsffield function of fielddecode.c which leads to segmentation fault, allowing an attacker to cause an application crash...

Fedora 36 : mingw-binutils (2023-d044484038)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d044484038 advisory. Backport patch for CVE-2023-25587. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

CVE-2023-28097

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.9 and 3.2.6, a malformed SIP message containing a large Content-Length value and a specially crafted Request-URI causes a segmentation fault in OpenSIPS. This issue occurs when a large amount of shared memo...