ROS-20220315-01

A vulnerability in the libxml2 XML document parsing library is related to a post-release memory usage error when processing ID and IDREF attributes in the valid.c file. release when processing ID and IDREF attributes in valid.c file. Exploitation of the vulnerability could allow an attacker actin...

TP-Link TL-WR886N Stack Overflow Vulnerability (CNVD-2022-20080)

The TP-Link TL-WR886N is a wireless router from China P&L. A stack overflow vulnerability exists in the TP-Link TL-WR886N /cloudconfig/routerpost/getregverifycode, which can be exploited by a remote attacker to submit a special request that can crash an application or can be used to execute...

TP-Link TL-WR886N Stack Overflow Vulnerability (CNVD-2022-20081)

TP-Link TL-WR886N is a wireless router from China Pulian Company.TP-Link TL-WR886N /cloudconfig/clouddevice/info is vulnerable to stack overflow, which can be exploited by remote attackers to submit special requests that can crash the application or execute arbitrary code in the application...

TP-Link TL-WR886N Stack Overflow Vulnerability (CNVD-2022-21167)

The TP-Link TL-WR886N is a wireless router from China P&L. A stack overflow vulnerability exists in the TP-Link TL-WR886N /cloudconfig/routerpost/checkresetpwdverifycode, which can be exploited by a remote attacker to submit a special request that can crash the application or can execute arbitrar...

Denial Of Service (DoS)

libspf2 is vulnerable to denial of service. The vulnerability exists in ACLosslessScan::ParseMCU function in aclosslessscan.cpp because of an uncaught floating point exception which allows an attacker to cause an application crash...

CVE-2022-23625 DoS vulnerability: Malformed Resource Identifiers

Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers can be generated and...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service. The vulnerability exists in the TIFFInitJBIG function in the tifjbig.c file allowing an attacker to cause an application crash...

Denial Of Service (DoS)

github.com/istio/istio is vulnerable to Denial Of Service DoS. The vulnerability exists because the library does not properly limit the reads from untrusted inputs, allowing an attacker to crash the application by providing maliciously crafted messages...

Heap overflow

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

CVE-2022-0891

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

CVE-2022-0891

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

CVE-2022-0891

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

CVE-2022-0891

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

CVE-2022-0891

CVE-2022-0891 is a heap buffer overflow in ExtractImageSection (tiffcrop.c) of libtiff 4.3.0. A crafted TIFF image can trigger unsafe/out-of-bounds memory access, causing application crash and potential information disclosure. Connected advisories (Astra Linux, AlmaLinux, Arch Linux, Debian secur...

Denial Of Service (DoS)

github.com/golang/go is vulnerable to Denial Of Service DoS. An attacker can crash the application by providing a deeply nested regular expression to reuse function of parse.go...

Ubuntu 21.10 : PHP vulnerabilities (USN-5300-3)

The remote Ubuntu 21.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5300-3 advisory. USN-5300-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 21.10. Tenable has extracted the preceding description blo...

openSUSE 15 Security Update : php7 (openSUSE-SU-2022:0699-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0699-1 advisory. - The zendstringextend function in Zend/zendstring.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative lengt...

openSUSE 15 Security Update : webkit2gtk3 (openSUSE-SU-2022:0705-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0705-1 advisory. - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2,...

SUSE SLES12: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2022:0690-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0690-1 advisory. Update to version 2.34.5 bsc1195735: - CVE-2022-22589: A validation issue was addressed with improved input sanitization. -...

OPENSUSE-SU-2022:0699-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2017-8923: Fixed denial of service application crash when using .= with a long string zendstringextend func in Zend/zendstring.h bsc1038980...