PT-2022-33209

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.320 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-33103

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.249 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. This problem has been identified but its actual impact and potential for attack have not been confirmed...

PT-2022-33026

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.200 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-32918

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.124 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32576

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.6 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-32768

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.49 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-33162

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.285 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32577

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.6 Description The issue concerns a signed integer overflow in the ip6 append data function. This is an automated ID intended to aid in discovery of potential security vulnerabilities, and the actual impact...

Debian DLA-2996-1 : mruby - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2996 advisory. Brief introduction CVE-2017-9527 Description CVE-2018-10191 Description CVE-2018-11743 Description CVE-2018-12249 Description CVE-2018-14337 Description...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2022-1645)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2022-1425)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-44493

An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call...

PT-2022-12151

Name of the Vulnerable Software and Affected Versions FIS GT.M versions through V7.0-000 Description An issue was discovered related to the YottaDB code base. Using crafted input, an attacker can cause a size variable, stored as a signed int, to equal an extremely large value, which is interprete...

PT-2022-28200

Name of the Vulnerable Software and Affected Versions PocketMine-MP affected versions not specified Description The issue arises from the LoginPacket using BinaryStream-getLInt to read JSON payload lengths. Since BinaryStream-getLInt returns a signed integer, a malicious client can craft a packet...

Debian DLA-2935-1 : expat - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2935 advisory. - Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES. CVE-2022-23852 - xmltokimpl.c i...

Amazon Linux 2 : expat (ALAS-2022-1754)

The version of expat installed on the remote host is prior to 2.1.0-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1754 advisory. expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML...

SUSE SLED15 / SLES15 Security Update : expat (SUSE-SU-2022:0498-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0498-1 advisory. - CVE-2022-23852: Fixed signed integer overflow in XMLGetBuffer bsc1195054. - CVE-2022-23990: Fixed integer...

SUSE-SU-2022:0498-1 Security update for expat

This update for expat fixes the following issues: - CVE-2022-23852: Fixed signed integer overflow in XMLGetBuffer bsc1195054. - CVE-2022-23990: Fixed integer overflow in the doProlog function bsc1195217...

OPENSUSE-SU-2022:0498-1 Security update for expat

This update for expat fixes the following issues: - CVE-2022-23852: Fixed signed integer overflow in XMLGetBuffer bsc1195054. - CVE-2022-23990: Fixed integer overflow in the doProlog function bsc1195217...

SUSE: Security Advisory (SUSE-SU-2022:14884-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...