Oracle Linux 8 : webkit2gtk3 (ELSA-2022-1777)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1777 advisory. 2.34.6-1 - Update to 2.34.6 Related: 1985042 2.34.5-1 - Update to 2.34.5 - Related: 1985042 2.34.4-1 - Update to 2.34.4 - Resolves: 1985042 2.32.4-1 -...

Heap-based Buffer Overflow

htmldoc is vulnerable to heap-based buffer overflow. The vulnerability exists in pdfwritenames in ps-pdf.cxx which may lead to arbitrary code execution and crash of an application...

GHSA-CQMH-MPX2-G633 Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function...

Improper Restriction of Operations within the Bounds of a Memory Buffer in python-cjson

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function...

librsvg DoS via Cyclic References

librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service infinite loop, stack consumption, and application crash via cyclic references in an SVG document...

GHSA-J984-Q4QC-6QXF librsvg DoS via Cyclic References

librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service infinite loop, stack consumption, and application crash via cyclic references in an SVG document...

PyFriBidi Buffer overflow in the fribidi_utf8_to_unicode function

Buffer overflow in the fribidiutf8tounicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service application crash via a 4-byte utf-8 sequence...

GHSA-6476-G47X-H3C7 PyFriBidi Buffer overflow in the fribidi_utf8_to_unicode function

Buffer overflow in the fribidiutf8tounicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service application crash via a 4-byte utf-8 sequence...

ccsv Double Free vulnerability

The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service double free and application crash or possibly have unspecified other impact via a crafted file...

GHSA-5GXP-C379-PJ42 ccsv Double Free vulnerability

The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service double free and application crash or possibly have unspecified other impact via a crafted file...

ccsv Double Free vulnerability

The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service double free and application crash or possibly have unspecified other impact via a crafted file...

[SECURITY] [DLA 3011-1] vim security update

Debian LTS Advisory DLA-3011-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 16, 2022 https://wiki.debian.org/LTS Package : vim Version : 2:8.0.0197-4+deb9u6 CVE ID : CVE-2022-0261 CVE-2022-0351 CVE-2022-0413 CVE-2022-0443 CVE-2022-0572 CVE-2022-1154...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. The vulnerability exists in Sharesheet which allows an attacker to crash the application via specific user interactions...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. An attacker can crash the application through the use after free in web ui diagnostics...

Denial Of Service (DoS)

openjpeg is vulnerable to denial of service. The vulnerability exists in freefunction due to not handling an input directory with a large number of files leading to a memory corruption causing an application crash...

Denial Of Service (DoS)

clamav is vulnerable to denial of service DoS attacks. A vulnerability in the TIFF file parser allows an attacker to cause an application crash...

Denial Of Service (DoS)

curl is vulnerable to denial of service. The vulnerability exists due to incorrectly resolved name which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists in the drivers/usb/gadget/composite.c due to the lack of validation in the interface OS descriptor requests, allowing an attacker to cause an application crash...

Out-of-bound Reads

linux kernel is vulnerable to out-of bound reads. The vulnerability exists in drivers/usb/gadget/legacy/inode.c due to mishandling in dev-buf release which allows an attacker to cause an application crash...

Buffer Overflow

PJSIP is vulnerable to buffer overflow. The vulnerability exists when users call the API pjmediasdpprint, pjmediasdpmediaprint which allows an attacker to cause a memory corruption which leads to an application crash...