webkitgtk: Incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create

A segmentation violation vulnerability was found in webkitgtk. An attacker with network access could pass specially crafted HTML files causing an application to halt or crash...

Moderate: Red Hat Security Advisory: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

An update for the virt:rhel and virt-devel:rhel modules is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2022-30524

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...

CVE-2022-30524

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...

CVE-2022-30524

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...

CVE-2022-30524

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...

Active Exploitation of F5 BIG-IP iControl REST CVE-2022-1388

On May 4, 2022, F5 released an advisory listing several vulnerabilities, including CVE-2022-1388, a critical authentication bypass that leads to remote code execution in iControl REST with a CVSSv3 base score of 9.8. The vulnerability affects several different versions of BIG-IP prior to 17.0.0,...

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733

Description NULL Pointer Dereference in function vimregexecstring at regexp.c:2733 allows attackers to cause a denial of service application crash via a crafted input. vim version git log commit b370771bffc8395204f53209b69e35dff95a9237 HEAD - master, tag: v8.2.4922, origin/master, origin/HEAD POC...

Ubuntu 16.04 ESM : jbig2dec vulnerabilities (USN-5405-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5405-1 advisory. It was discovered that jbig2dec incorrectly handled memory when parsing invalid files. An attacker could use this issue to cause jbig2dec to crash, leadi...

MariaDB 10.6.0 < 10.6.8 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.6.8 advisory. - MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component...

Huawei EulerOS: Security Advisory for gmp (EulerOS-SA-2022-1683)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MariaDB 10.5.0 < 10.5.16 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.5.16. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.5.16 advisory. - MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component...

Huawei EulerOS: Security Advisory for unzip (EulerOS-SA-2022-1653)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MariaDB 10.3.0 < 10.3.35 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.3.35. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.3.35 advisory. - MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component...

Denial Of Service (DoS)

njs is vulnerable to denial of service. It used in NGINX, was discovered to contain a segmentation violation via njsobjectsetprototype in /src/njsobject.c...

FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size.

...

FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.

...

Ubuntu 18.04 LTS / 20.04 LTS : SQLite vulnerability (USN-5403-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5403-1 advisory. It was discovered that SQLite command-line component incorrectly handled certain queries. An attacker could possibly use this issue to cause a crash o...

CVE-2022-24903

Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code...

CVE-2021-27421

NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDKMalloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior such segmentation fault when assigning a particular block of memory from the he...