18115 matches found
c-ares: Heap buffer over read in ares_parse_soa_reply
A heap buffer over-read flaw was found in c-ares via the aresparsesoareply function in aresparsesoareply.c...
Moderate: Red Hat Security Advisory: c-ares security update
An update for c-ares is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Denial Of Service (DoS)
mupdf is vulnerable to Divide By Zero. The vulnerability is caused due to missing float validation in the computecolor function within jquant2.c, resulting in a divide by zero exception. This can potentially lead to a Denial of Service DoS attacks...
The vulnerability of the `line_bytes_split()` function (src/split.c) in the GNU Core Utilities suite allows a attacker to cause a service failure.
The vulnerability of the linebytessplit function src/split.c in the GNU Core Utilities suite is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Moderate: sqlite security update
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
RHEL 8 : protobuf-c (RHSA-2024:0406)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0406 advisory. The protobuf-c packages provide C bindings for Google's Protocol Buffers. Security Fixes: protobuf-c: unsigned integer overflow in parserequiredmembe...
RHEL 8 : c-ares (RHSA-2024:0419)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0419 advisory. The c-ares C library defines asynchronous DNS Domain Name System requests and provides name resolving API. Security Fixes: c-ares: Heap buffer over...
ALSA-2024:0465 Moderate: sqlite security update
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
[SECURITY] Fedora 38 Update: mongo-c-driver-1.24.3-2.fc38
mongo-c-driver is a client library written in C for MongoDB...
Fedora: Security Advisory for mongo-c-driver (FEDORA-2024-fb4958e901)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-21646 affecting package azure-iot-sdk-c for versions less than 2022.01.21-2
CVE-2024-21646 affecting package azure-iot-sdk-c for versions less than 2022.01.21-2. A patched version of the package is available...
Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c
...
APsystems Energy Communication Unit (ECU-C) Power Control Software
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION : Exploitable via adjacent network / low attack complexity Vendor : APsystems Equipment : Energy communication Unit ECU-C Power Control Software Vulnerability : Improper Access Control 2. RISK EVALUATION Successful exploitation of this...
SUSE CVE-2024-22563
openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc in openvswitch-2.17.8/lib/util.c...
Fedora 38 : mongo-c-driver (2024-fb4958e901)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fb4958e901 advisory. - fix: bsonutf8validate on some inputs leads to an infinite loop CVE-2023-0437 Tenable has extracted the preceding description block directly from t...
Amazon Linux 2 : c-ares (ALAS-2024-2429)
The version of c-ares installed on the remote host is prior to 1.10.0-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2429 advisory. When cross-compiling c-ares and using the autotools build system, CARESRANDOMFILE will not be set, as seen when cross compiling...
Low: c-ares
Issue Overview: When cross-compiling c-ares and using the autotools build system, CARESRANDOMFILE will not be set, as seen when cross compiling aarch64 android. This will downgrade to using rand as a fallback which could allow an attacker to take advantage of the lack of entropy by not using a...
Low: c-ares
Issue Overview: When cross-compiling c-ares and using the autotools build system, CARESRANDOMFILE will not be set, as seen when cross compiling aarch64 android. This will downgrade to using rand as a fallback which could allow an attacker to take advantage of the lack of entropy by not using a...