Advisory ROSA-SA-2023-2244

Software: babel 2.5.1 OS: ROSA Virtualization 2.1 packageevrstring: babel-2.5.1-7.rv3 CVE-ID: CVE-2021-42771 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary local .dat files containing serialized Python objects via directory traversal,...

PT-2023-9458

Name of the Vulnerable Software and Affected Versions @babel/traverse versions prior to 7.23.2 and 8.0.0-alpha.4 babel-traverse all versions Description The issue is related to the path.evaluate or path.evaluateTruthy internal Babel methods. Using Babel to compile code that was specifically craft...

OESA-2023-1683 python-mako security update

Python-mako is a template library for Python. It provides a familiar, non-XML syntax which compiles into Python modules for maximum performance. Mako's syntax and API borrows from the best ideas of many others, including Django templates, Cheetah, Myghty, and Genshi. Security Fixes: Sqlalchemy ma...

The vulnerability of the Open Babel software for converting chemical substance file formats lies in the use of an uninitialized pointer, which allows a hacker to execute arbitrary code.

The vulnerability of the pFormat function in the Open Babel software for converting chemical substance formats is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the pFormat function in the software for converting chemical substance formats, Open Babel, allows a hacker to execute arbitrary code.

The vulnerability of the pFormat function in the Open Babel software for converting chemical substance formats is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the WriteMoleculeCSRFormat function in the Open Babel file format conversion software allows a hacker to execute arbitrary code.

The vulnerability of the WriteMoleculeCSRFormat function in the Open Babel file format conversion software is related to the execution of the operation outside the buffer memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the res function in software for converting chemical substance file formats allows a hacker to execute arbitrary code.

The vulnerability of the res function in the Open Babel software for converting chemical substance file formats is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the coord_file function in the software for converting chemical substance format files, Open Babel, allows a hacker to execute arbitrary code.

The vulnerability of the pFormat function in the software for converting chemical substance formats in Open Babel is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Out-of-bounds write vulnerabilities in popular chemistry software; Foxit PDF Reader issues could lead to remote code execution

Cisco Talos recently worked with two vendors to patch multiple vulnerabilities in a favored software library used in chemistry laboratories and the Foxit PDF Reader, one of the most popular PDF reader alternatives to Adobe Acrobat. Attackers could exploit these vulnerabilities to carry out a...

GHSA-V5FW-Q4PF-8P2H Duplicate Advisory: Open Babel has out-of-bounds write in Gaussian translationVectors[]

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jg3h-pv7c-4f9c. This link is maintained to preserve external references. Original Description Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple...

GHSA-WJ42-V2P3-FQ2W Duplicate Advisory: Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5rff-8f7c-8jmw. This link is maintained to preserve external references. Original Description Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and...

Duplicate Advisory: Open Babel has out-of-bounds write in CSR PadString (title field)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p594-7xw4-g76p. This link is maintained to preserve external references. Original Description An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master comm...

GHSA-QGHV-8H77-699V Duplicate Advisory: Open Babel has out-of-bounds write in MOL2 attribute/value parser

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vjg6-gm8m-v5g6. This link is maintained to preserve external references. Original Description An out-of-bounds write vulnerability exists in the MOL2 format attribute and value functionality of Open Babel 3.1.1...

Duplicate Advisory: Open Babel has out-of-bounds write in MSI translationVectors[]

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f8h2-c479-vqxf. This link is maintained to preserve external references. Original Description Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple...

GHSA-HRVG-GX3J-WH53 Duplicate Advisory: Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-55f6-pf8r-c2f4. This link is maintained to preserve external references. Original Description Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple...

GHSA-7RCM-W6FF-J43W Duplicate Advisory: Open Babel has uninitialized pointer dereference in PQS pFormat

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8qxc-57hf-hc9j. This link is maintained to preserve external references. Original Description A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1.1 and...

GHSA-H632-QVV7-2623 Duplicate Advisory: Open Babel has uninitialized pointer dereference in GRO residue parser

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mw5r-wq2m-397c. This link is maintained to preserve external references. Original Description A use of uninitialized pointer vulnerability exists in the GRO format res functionality of Open Babel 3.1.1 and maste...

GHSA-VX29-RWGR-834P Duplicate Advisory: Open Babel has out-of-bounds write in PQS coord_file parser

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f29h-2h58-48r7. This link is maintained to preserve external references. Original Description An out-of-bounds write vulnerability exists in the PQS format coordfile functionality of Open Babel 3.1.1 and master...

GHSA-G8F4-G673-RFW2 Duplicate Advisory: Open Babel has out-of-bounds write in ORCA nAtoms parser

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rj4c-r689-cm87. This link is maintained to preserve external references. Original Description Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and...

GHSA-JMF7-79P7-QCHQ Duplicate Advisory: Open Babel has out-of-bounds write in CSR PadString (title field)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p594-7xw4-g76p. This link is maintained to preserve external references. Original Description An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master comm...