Lucene search
+L

6500 matches found

UbuntuCve
UbuntuCve
•added 2022/12/19 8:15 p.m.•36 views

CVE-2022-3775

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption an...

7.1CVSS7.6AI score0.01043EPSS
SaveExploits0References3
Prion
Prion
•added 2022/12/19 8:15 p.m.•44 views

Heap overflow

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption an...

3.2CVSS8AI score0.01043EPSS
SaveExploits0References2Affected Software2
Debian CVE
Debian CVE
•added 2022/12/19 12:00 a.m.•50 views

CVE-2022-3775

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption an...

7.1CVSS8.5AI score0.01043EPSS
SaveExploits0
Cvelist
Cvelist
•added 2022/12/19 12:00 a.m.•57 views

CVE-2022-3775

When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bitmap size. As consequence an attacker can craft an input which will lead to a out-of-bounds write into grub2's heap, leading to memory corruption an...

8.4AI score0.01043EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/12/14 12:00 a.m.•19 views

Mageia: Security Advisory (MGASA-2022-0459)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.02222EPSS
SaveExploits0References4
osv_mgasa
osv_mgasa
•added 2022/12/13 10:09 p.m.•23 views

MGASA-2022-0459 Updated rxvt-unicode packages fix security vulnerability

rxvt-unicode 9.25 and 9.26 are vulnerable to remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set. CVE-2022-4170...

9.8CVSS9.5AI score0.02222EPSS
SaveExploits0References3
Mageia
Mageia
•added 2022/12/13 10:09 p.m.•55 views

Updated rxvt-unicode packages fix security vulnerability

rxvt-unicode 9.25 and 9.26 are vulnerable to remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set. CVE-2022-4170...

9.8CVSS2.9AI score0.02222EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/12/13 12:00 a.m.•43 views

RHEL 9 : grub2 (RHSA-2022:8978)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:8978 advisory. The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular...

8.6CVSS7.5AI score0.01043EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2022/12/12 12:00 a.m.•54 views

Debian dla-3237 : node-tar - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3237 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3237-1 [email protected]...

8.6CVSS7.3AI score0.03286EPSS
SaveExploits0References6
NVD
NVD
•added 2022/12/09 6:15 p.m.•28 views

CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.8CVSS0.02222EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2022/12/09 6:15 p.m.•15 views

DEBIAN-CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.8CVSS8.8AI score0.02222EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2022/12/09 6:15 p.m.•29 views

UBUNTU-CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.8CVSS7.5AI score0.02222EPSS
SaveExploits0References4
Prion
Prion
•added 2022/12/09 6:15 p.m.•23 views

Remote code execution

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

7.5CVSS9.4AI score0.02222EPSS
SaveExploits0References3Affected Software3
AlpineLinux
AlpineLinux
•added 2022/12/09 12:00 a.m.•75 views

CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.8CVSS9.6AI score0.02222EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2022/12/09 12:00 a.m.•10 views

CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.6AI score0.02222EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2022/12/09 12:00 a.m.•74 views

CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.8CVSS9.6AI score0.02222EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2022/12/09 12:00 a.m.•39 views

Amazon Linux 2022 : unzip (ALAS2022-2022-221)

The version of unzip installed on the remote host is prior to 6.0-57. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-221 advisory. - A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null...

5.5CVSS6.1AI score0.02421EPSS
SaveExploits3References7
CNNVD
CNNVD
•added 2022/12/09 12:00 a.m.•19 views

rxvt-unicode 安全漏洞

rxvt-unicode is an application. A customizable terminal that branches from rxvt. A security vulnerability exists in rxvt-unicode. An attacker can exploit this vulnerability to remotely execute code...

9.8CVSS8.4AI score0.02222EPSS
SaveExploits0References4
CVE
CVE
•added 2022/12/09 12:00 a.m.•138 views

CVE-2022-4170

The CVE-2022-4170 issue affects the rxvt-unicode terminal emulator, specifically the Perl background extension. The vulnerability allows remote code execution when an attacker can control data written to the user’s terminal and certain X resources/options are set. Multiple advisories (Gentoo GLSA...

9.8CVSS9.3AI score0.02222EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2022/12/09 12:00 a.m.•29 views

CVE-2022-4170

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set...

9.8CVSS9.6AI score0.02222EPSS
SaveExploits0References5
Rows per page
Query Builder