Oracle Linux 7 : poppler / and / evince (ELSA-2020-1074)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1074 advisory. evince 3.28.2-9 - Handle failure from TIFFReadRGBAImageOriented - Resolves: 1717352 poppler 0.26.5-42 - Fix potential integer overflow and check length...

Oracle Linux 8 : elfutils (ELSA-2019-3575)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3575 advisory. 0.176-5 - Add elfutils-0.176-strip-symbols-illformed.patch 0.176-4 - Add elfutils-0.176-elf-update.patch 1717349 0.176-3 - Rebuilt for annobin change...

Oracle Linux 7 : exiv2 (ELSA-2019-2101)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2101 advisory. 0.27.0-2 - Minor improvements Resolves: bz1652637 0.27.0-1 - Exiv2 0.27.0 Resolves: bz1652637 Tenable has extracted the preceding description block...

Oracle Linux 7 : exempi (ELSA-2019-2048)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2048 advisory. - Fix CVE-2017-18233 resolves: 1574865 - Fix CVE-2017-18234 resolves: 1656011 - Fix CVE-2017-18236 resolves: 1574905 - Fix CVE-2017-18238 resolves:...

Oracle Linux 7 : taglib (ELSA-2020-1175)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1175 advisory. 1.8-8.20130218git - Fixed OOB read when loading invalid ogg flac file Resolves: bz1585260 Tenable has extracted the preceding description block directly from th...

Oracle Linux 8 : libsndfile (ELSA-2020-1636)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-1636 advisory. - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function i2alawarray in alaw 1673085 Tenable has extracted the preceding description...

Debian DSA-5489-1 : file - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5489 advisory. - File before 5.43 has an stack-based buffer over-read in filecopystr in funcs.c. NOTE: File is the name of an Open Source project. CVE-2022-48554 Note that Nessus has not...

CVE-2022-40524

Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service...

CVE-2022-33220

Information disclosure in Automotive multimedia due to buffer over-read...

Information disclosure

Information disclosure in Automotive multimedia due to buffer over-read...

Memory corruption

Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service...

CVE-2023-33016 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN firmware while parsing MLO multi-link operation...

CVE-2023-33015 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...

CVE-2023-21667 Buffer Over-read in Bluetooth HOST

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard...

CVE-2022-40524

CVE-2022-40524 is a memory corruption due to a buffer over-read in the Modem during processing of SetNativeHandle RTP service. The affected component is a Qualcomm modem/closed‑source module; root cause is a buffer over-read in the Modem’s SetNativeHandle RTP handling. Impact per sources indicate...

CVE-2022-40524 Buffer over-read in Modem

Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service...

CVE-2022-33220

CVE-2022-33220 describes an information disclosure due to a buffer over-read in the automotive multimedia stack built on Qualcomm chipsets. Connected sources confirm it affects Qualcomm display components and classify the vulnerability with a moderate severity (NVD: base score 5.5, local attack v...

CVE-2022-33220 Buffer over-read in Automotive multimedia

Information disclosure in Automotive multimedia due to buffer over-read...

CVE-2022-33220 Buffer over-read in Automotive multimedia

Information disclosure in Automotive multimedia due to buffer over-read...

Huawei EulerOS: Security Advisory for lua (EulerOS-SA-2023-2697)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...