Oracle Linux 8 : wavpack (ELSA-2020-1581)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1581 advisory. - CVE-2018-19841 - CVE-2019-1010317 - CVE-2019-1010315 - CVE-2019-11498 - CVE-2018-19840 Tenable has extracted the preceding description block directly...

Oracle Linux 7 : exiv2 (ELSA-2019-2101)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2101 advisory. 0.27.0-2 - Minor improvements Resolves: bz1652637 0.27.0-1 - Exiv2 0.27.0 Resolves: bz1652637 Tenable has extracted the preceding description block...

Oracle Linux 6 : libxml2 (ELSA-2011-1749)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1749 advisory. - Fixes another XPath problem CVE-2011-2834 - Fix a potential crasher in XPath or XSLT, CVE-2011-1944 Tenable has extracted the preceding description...

Oracle Linux 7 : libjpeg-turbo (ELSA-2019-2052)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2052 advisory. - Fix CVE-2018-14498 1687475 - Fix CVE-2018-11212 1586062 - Fix CVE-2016-3616 1318509, CVE-2018-11213 1589091 and CVE-2018-11214 1589110 Tenable has...

Oracle Linux 6 : openssl-fips (ELSA-2015-3022)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3022 advisory. - fix CVE-2010-5298 - possible use of memory after free - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment - fix CVE-2014-0198 - possible...

Oracle Linux 5 : openssl (ELSA-2009-1335)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1335 advisory. - fix CVE-2009-1386 CVE-2009-1387 DTLS DoS problems 503685, 503688 - fix CVE-2009-1377 CVE-2009-1378 CVE-2009-1379 DTLS DoS problems 501253, 501254,...

Out-of-bounds Read

libgpac.so is vulnerable to Out-of-bounds Read. The vulnerability is caused by not validating a variable named buflen to contain a data of sufficient length in a function MPEG12ParseSeqHdr in a file mediatools/mpeg2ps.c. A attacker can exploit this vulnerability to mount a Denial Of Service DOS...

Denial Of Service (DoS)

libfreerdp.so is vulnerable to Denial Of Service DoS. The vulnerability exists in the rfx.c due to a stack overflow error which allows an attacker to cause an application crash, or potentially execute arbitrary code...

Out-Of-Bounds Read

libfreerdp.so is vulnerable to Out-Of-Bound Read. The vulnerability exists because of the lack of boundary checks in the multiopaquerect-numRectangles of orders.c, which leads to out-of-bounds read errors, allowing an attacker to cause an application crash...

Buffer Overflow

libfreerdp.so is vulnerable to Buffer Overflow. The vulnerability exists due to the global buffer overflow in the ncrushdecompress function of ncrush.c because it does not properly verify offsets while decoding data, which allows an attacker to cause an application crash by providing a maliciousl...

Denial Of Service (DoS)

wabt is vulnerable to Denial Of Service DoS. The vulnerability exists due to the out-of-bounds read in the OnReturnCallIndirectExpr-GetReturnCallDropKeepCount component, allowing an attacker to cause an application crash...

FreeRDP writePixelBGRX Buffer Overflow Vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol by the FreeRDP team. FreeRDP writePixelBGRX suffers from a buffer overflow vulnerability that can be exploited by a remote attacker to submit a special request that can crash an application and cause a denial of service attac...

Use After Free

Firefox is vulnerable to Use After Free. The vulnerability exists when creating a callback over IPC for showing the File Picker window, which leads to memory corruption, allowing an attacker to cause an application crash by creating multiple of the same callbacks...

Use After Free

Firefox is vulnerable to Use After Free. The vulnerability exists when creating a callback over IPC for showing the Color Picker window, which leads to memory corruption, allowing an attacker to cause an application crash by creating multiple of the same callbacks...

Use After Free

Firefox is vulnerable to Use After Free. The vulnerability exists when receiving rendering data over IPC mStream, which leads to memory corruption, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

radare2 is vulnerable to Denial of Service DoS attacks. The vulnerability exists in the vaxopfunction function in the radare2 codebase. The function is responsible for parsing and decoding VAX instructions. The vulnerability occurs when the function fails to properly check the size of a buffer...

Buffer Overflow

libfrr.so, is vulnerable to Buffer Overflows. The vulnerability exists in the bgpcapabilitysoftwareversion function at bgpopen.c due to not properly handling the buffer size, which allows an attacker to cause an application crash...

Heap Buffer Overflow

libyara.so is vulnerable to heap-based buffer overflow. The vulnerability exists because it does not properly manage memory in exec.c, which allows an attacker to parse a crafted compiled rule file, causing an application crash...

Use After Free

libgpac.so is vulnerable to Use After Free. The vulnerability exists due to the heap-use-after-free in the gfisomboxparseex function of boxfuncs.c, which allows an attacker to cause an application crash...

Google Chrome MediaStream Memory Misreference Vulnerability (CNVD-2023-69036)

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in Google Chrome MediaStream. An attacker can exploit this vulnerability to execute arbitrary code on the system or cause an application to crash...