12248 matches found
CVE-2022-40737
An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4ByteStream::Write and AP4HdlrAtom::WriteFields...
CVE-2022-40737
An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4ByteStream::Write and AP4HdlrAtom::WriteFields...
CVE-2022-40737
An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4ByteStream::Write and AP4HdlrAtom::WriteFields...
Oracle Linux 8 : ruby:2.7 (ELSA-2022-6447)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6447 advisory. - Fix regular Expression Denial of Service Vulnerability of Date Parsing Methods. Resolves: CVE-2021-41817 - Fix cookie prefix spoofing in...
Oracle Linux 8 : ruby:3.0 (ELSA-2022-6450)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6450 advisory. - Fix double free in Regexp compilation. Resolves: CVE-2022-28738 Tenable has extracted the preceding description block directly from the Oracle Linux...
PT-2022-25499 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 versions 1.6.0-639 and earlier Description: A buffer over-read issue exists in the function AP4 StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, which is called from AP4 ByteStream::Write and AP4...
EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2336)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...
EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2307)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...
Denial Of Service (DoS)
libconfuse.so is vulnerable to denial of service. An attacker can send a malicious username parameter to the function cfgtildeexpand to cause a heap-based buffer over-read, leading to an application crash...
Denial Of Service (DoS)
libgpac.so is vulnerable to denial of service.The vulnerability exists due to the buffer over read in GFErr xtraboxread function in boxcodebase.c, which allows an attacker to crash the application by providing a malicious input...
CVE-2022-3178
Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV...
CVE-2022-3178
Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV...
CVE-2022-3178
The CVE-2022-3178 entry concerns a Buffer Over-read in GPAC (gpac/gpac) prior to 2.1.0-DEV. Affected component is the GPAC library; root cause is a buffer over-read in its code path. Impact is described as high confidentiality/integrity/availability concerns with local access and user interaction...
CVE-2022-3178
Removed by vendor...
CVE-2022-3178 Buffer Over-read in gpac/gpac
Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV...
CVE-2022-3178 Buffer Over-read in gpac/gpac
Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV...
Security advisory: zlib in Qt
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field and has been assigned the CVE id CVE-2022-37434. As this only affects applications that call inflateGetHeader directly then applications using Qt are not directly...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2022:3229-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3229-1 advisory. Updated to version 9.0 with patch level 0313: - CVE-2022-2183: Fixed out-of-bounds read through...
