12089 matches found
Amazon Linux 2022 : libsepol, libsepol-devel, libsepol-static (ALAS2022-2022-208)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-208 advisory. The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper. CVE-2021-36084 The CIL compiler in SELinux 3.2 has a...
Amazon Linux 2 : squid (ALAS-2023-1907)
The version of squid installed on the remote host is prior to 3.5.20-17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1907 advisory. In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service...
EulerOS Virtualization 2.10.0 : libsepol (EulerOS-SA-2022-1405)
According to the versions of the libsepol package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and...
wolfSSL 5.5.2 WOLFSSL_CALLBACKS Heap Buffer Over-Read Vulnerability
wolfSSL before 5.5.2: Heap-buffer over-read with WOLFSSLCALLBACKS ==================================================================== INFO ======= The CVE project has assigned the id CVE-2022-42905 to this issue. Severity: 9.1 CRITICAL Affected version: before 5.5.2 End of embargo: Ended October...
Oracle Linux 8 : ruby:2.5 (ELSA-2023-12064)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12064 advisory. ruby 2.5.9-110.0.1 - Fix for CVE-2022-28739 Orabug: 34824177 Tenable has extracted the preceding description block directly from the Oracle Linux security...
CVE-2023-24021
Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules that read the FILESTMPCONTENT collection...
wolfSSL WOLFSSL_CALLBACKS Heap Buffer Over-Read
wolfSSL before 5.5.2: Heap-buffer over-read with WOLFSSLCALLBACKS ==================================================================== INFO ======= The CVE project has assigned the id CVE-2022-42905 to this issue. Severity: 9.1 CRITICAL Affected version: before 5.5.2 End of embargo: Ended October...
Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities
Summary IBM Cloud Pak for Security includes components with known vulnerabilities. These have been updated in the latest release and vulnerabilities have been addressed. Please follow the instructions in the Remediation/Fixes section below to update to the latest version of Cloud Pak for Security...
CVE-2022-46456
A buffer over-read was found in NASM. The issue occurs when a specially crafted file is processed by NASM when using the dbg output file format, causing the application to crash and disclose a limited amount of information...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a buffer over-read flaw in Linux Kernel (CVE-2020-28915)
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a buffer over-read flaw in Linux Kernel CVE-2020-28915. This Linux Kernel is used as part of the base image included in our service components. Please read the details for remediation below. Vulnerability...
Debian dla-3265 : exiv2 - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3265 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3265-1 [email protected]...
CVE-2022-33253
Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames...
CVE-2022-33284
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame...
CVE-2022-33286
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames...
CVE-2022-33283
Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check...
CVE-2022-33285
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames...
CVE-2022-33255
Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device...
CVE-2022-22079
Denial of service while processing fastboot flash command on mmc due to buffer over read...
