CVE-2022-45412

When resolving a symlink such as file:///proc/self/fd/1, an error message may be produced where the symlink was resolved to a string containing unitialized memory in the buffer. This bug only affects Thunderbird on Unix-based operated systems Android, Linux, MacOS. Windows is unaffected.. This...

CVE-2022-45412

When resolving a symlink such as file:///proc/self/fd/1, an error message may be produced where the symlink was resolved to a string containing unitialized memory in the buffer. This bug only affects Thunderbird on Unix-based operated systems Android, Linux, MacOS. Windows is unaffected.. This...

GLSA-202211-06 : Mozilla Firefox: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202211-06 Mozilla Firefox: Multiple Vulnerabilities - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 - Service Workers should not be able to infer information about opaque...

AlmaLinux 9 : thunderbird (ALSA-2022:8561)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2022:8561 advisory. - Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined with...

AlmaLinux 8 : thunderbird (ALSA-2022:8547)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2022:8547 advisory. - Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined with...

Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2022-320-02)

The version of mozilla-firefox installed on the remote host is prior to 102.5.0esr / 107.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-320-02 advisory. - Service Workers should not be able to infer information about opaque cross-origin responses; but timi...

thunderbird security update

102.3.0-3.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 102.3.0-3 - Update to 102.3.0 build1...

Vulnerability Spotlight: Vulnerabilities in popular library affect Unix-based devices

Lilith of Cisco Talos discovered these vulnerabilities. Cisco Talos recently discovered a memory corruption vulnerability in the uClibC library that could affect any Unix-based devices that use this library. uClibC and uClibC-ng are lightweight replacements for the popular gLibc library, which is...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Visualization, Fuzzing, Exploit and Patch...

vim over-range pointer offset vulnerability

Vim is a UNIX-based editor. vim versions prior to 8.2.4774 contain an out-of-range pointer offset vulnerability, which stems from the use of out-of-range pointer offsets in vim. An attacker could exploit this vulnerability to crash the program...

vim buffer overflow vulnerability (CNVD-2022-55222)

vim is a UNIX-based editor. vim versions prior to 8.2.4763 contain a buffer overflow vulnerability that stems from a failure to properly validate data boundaries when performing operations on memory in the software skiprange. An attacker could exploit this vulnerability to cause a software crash,...

Appneta Tcpreplay Buffer Overflow Vulnerability

Appneta Tcpreplay is the United States AppNeta Appneta company's set of UNIX-based operating system for editing and replaying network traffic open source utilities. Appneta Tcpreplay suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a heap overflow...

Unspecified Vulnerability in Appneta Tcpreplay

Appneta Tcpreplay is the United States AppNeta Appneta company's set of UNIX-based operating system for editing and replaying network traffic open source utilities. A security vulnerability exists in Appneta Tcpreplay 4.4.1, which stems from an assertion error in tcprewrite's getlayer4v6 in...

Appneta Tcpreplay Buffer Overflow Vulnerability (CNVD-2022-29572)

Appneta Tcpreplay is the United States AppNeta Appneta company's set of UNIX-based operating system for editing and replaying network traffic open source utilities. Appneta Tcpreplay suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a heap overflow...

vim buffer overflow vulnerability (CNVD-2022-20693)

Vim is a UNIX-based editor. vim suffers from a buffer overflow vulnerability that could be exploited by an attacker to input a specially crafted file, leading to a crash or code execution...

Vim Buffer Overflow Vulnerability (CNVD-2022-20695)

A buffer overflow vulnerability exists in Vim, a UNIX-based editor, which stems from a product src/regexpbt.c file that does not effectively check for memory bounds. An attacker could cause a buffer overflow via this vulnerability...

vim buffer overflow vulnerability (CNVD-2022-20696)

Vim is a UNIX-based editor. buffer overflow vulnerability exists in versions prior to Vim 8.2.4436, which stems from a heap overflow in winlbrchartabsize and can be exploited to crash the program...

An unspecified vulnerability exists in vim (CNVD-2022-13206)

Vim is a UNIX-based editor. vim versions prior to 8.2.4418 contain a security vulnerability that stems from the use of out-of-range pointer offsets in vim. No details of the vulnerability are currently available...

Security advisory: QProcess

Recently, the Qt Project's security team was made aware of an issue regarding QProcess and determined it to be a security issue on Unix-based platforms only. We do not believe this to be a considerable risk for applications as the likelihood of it being triggered is minimal. Specifically, the...

Vim Buffer Overflow Vulnerability (CNVD-2022-11175)

Vim is a UNIX-based editor. buffer overflow vulnerability exists in versions of Vim prior to 8.2, which stems from a heap overflow in exretab. An attacker could exploit this vulnerability to execute arbitrary code...