Low: glibc

Issue Overview: A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash. CVE-2023-5156 Affected Packages: glibc Issue Correction: Run dnf update glibc --releasever 2023.2.20231030 or dnf update...

Denial Of Service (DoS)

wabt is vulnerable to Denial of Service DoS. The vulnerability occurs within the hang.wasm component, resulting in an infinite loop causing an application crash...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service. The vulnerability is due to a lack of check ensuring that the pointer avcc is not NULL in the gfmediachangepl function. This allows an attacker to craft input that causes gfisomavcconfigget to return NULL, potentially leading to an application crash...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service DoS. The vulnerability is due the gfisomfindodidfortrack function in gpac/src/isomedia/mediaodf.c which causes invalid read memory access. This can lead to application crash resulting in Denial Of Service DOS...

Medium: nautilus

Issue Overview: GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive. CVE-2022-37290 Affected Packages: nautilus Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between A...

Buffer Overread

Mbed TLS is vulnerable to Buffer Overread. The vulnerability is due to improper validation of record lengths when calculating the MAC. This can potentially leak sensitive data or crash the application...

Denial Of Service (DoS)

libstb.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the stbiloadgiffrommemory function at stbimage.h due to the function call of stbiloadgifmain which allows an attacker to cause an application crash...

Denial Of Service (DoS)

github.com/quic-go/quic-go is vulnerable to Denial Of Service DoS. The vulnerability is a result of the mishandling of ACK frames that are serialized after CRYPTO frames in connection.go during the node handshake process. This flaw allows a malicious remote node to trigger a null pointer...

Denial Of Service (DoS)

libmatio.so is vulnerable to Denial Of Service DoS. The vulnerability exists in ReadNextFunctionHandle function at mat5.c which allows an attacker to cause an application crash...

openSUSE 15 Security Update : libnbd (SUSE-SU-2023:4222-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:4222-1 advisory. - A flaw was found in libnbd. A server can reply with a block size larger than 2^63 the NBD spec states the size is a 64-bit unsigned value. This issue could...

Buffer Overflow

libzephyr.so is vulnerable to Buffer Overflow. The vulnerability occurs due to a ineffective assert check within the STM32 Crypto Driver component which then leads to an application crash...

SUSE-SU-2023:4222-1 Security update for libnbd

This update for libnbd fixes the following issues: - Updated to version 1.18.1 - Updated to version 1.18.0: - CVE-2023-5215: Fixed an issue where an NBD server returning an unexpected block size might crash an application bsc1215799...

SUSE CVE-2023-45872

An issue was discovered in Qt before 6.2.11 and 6.3.x through 6.6.x before 6.6.1. When a QML image refers to an image whose content is not known yet, there is an assumption that it is an SVG document, leading to a denial of service application crash if it is not actually an SVG document...

HTTP/2 Stream Cancellation Attack

google.golang.org/grpc is vulnerable to HTTP/2 Stream Cancellation Attack. The vulnerability exists because the library does not enforce the limit of concurrently running handlers set by MaxConcurrentStreams. This enables an attacker to send malicious HTTP/2 requests, cancel them, and then send...

Denial Of Services (DoS)

libsquid.so is vulnerable to Denial of Service DoS. This vulnerability exists because it does not properly manage the conversion between numeric types, which allows an attacker to cause an application crash...

Denial Of Service (DoS)

parse-server is vulnerable to Denial of Service. The vulnerability is due to improper validation on the file upload mechanism. The attacker can exploit this issue by uploading a file without any extension resulting in an application crash...

Denial Of Service (DoS)

amqp-client is vulnerable to Denial Of Service DoS. The vulnerability exists because the library does not incorporate the maximum inbound message size into the ConnectionFactory. As a result, an attacker can potentially cause an application crash by sending excessively large messages, leading to ...

Denial Of Service (DoS)

next is vulnerable to Denial Of Service DoS. The vulnerability exists because the base-server.ts does not include a cache-control header. Consequently, empty prefetch responses might be cached by a Content Delivery Network CDN. This creates an opportunity for an attacker to potentially crash the...

Denial Of Services (DoS)

libpodofo.so is vulnerable to Denial of Service DoS. This vulnerability exists because it does not properly return null pointers in the stbiloadgiffrommemory function of stbimage.h, which allows an attacker to cause an application crash...

Ubuntu 16.04 ESM : Long Range ZIP vulnerabilities (USN-5171-2)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5171-2 advisory. USN-5171-1 fixed vulnerabilities in Long Range ZIP. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has...