18137 matches found
The vulnerability of the `read_formatted_entries` function in the `dwarf2.c` component of the GNU Binutils development environment allows a hacker to induce a service failure.
The vulnerability of the readformattedentries function in the dwarf2.c component of the GNU Binutils development environment is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially...
The vulnerability of the dwarf1.c component in the GNU Binutils development environment allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the dwarf1.c component in the GNU Binutils development environment is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...
The vulnerability of the decode_line_info function in the dwarf2.c component of the GNU Binutils development environment allows a hacker to induce a service failure.
The vulnerability of the decodelineinfo function in the dwarf2.c component of the GNU Binutils development environment is related to reading data beyond the allowable buffer limits. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF...
The vulnerability of the res_query function in the GNU C Library’s system library allows a attacker to cause a service failure.
The vulnerability of the resquery function in the GNU C Library’s system library is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the GNU C Library’s system library, related to the execution of operations beyond the buffer boundaries in memory, allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the GNU C Library is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the read_section function in the dwarf2.c component of the GNU Binutils development environment allows a hacker to induce a service failure.
The vulnerability of the readsection function in the dwarf2.c component of the GNU Binutils development environment relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created ELF file...
The vulnerability of the dwarf2.c component in the GNU Binutils development environment allows a hacker to trigger a service failure.
The vulnerability of the dwarf2.c component in the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker, operating remotely, to trigger a service failure using a specially created ELF file...
The vulnerability of the `makecontext` function in the GNU C Library allows a malicious actor to induce a service failure.
The vulnerability of the makecontext function in the GNU C Library is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
ALSA-2023:6944 Moderate: protobuf-c security update
The protobuf-c packages provide C bindings for Google's Protocol Buffers. Security Fixes: protobuf-c: unsigned integer overflow in parserequiredmember CVE-2022-48468 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, ref...
ALSA-2023:7207 Moderate: c-ares security update
The c-ares C library defines asynchronous DNS Domain Name System requests and provides name resolving API. Security Fixes: c-ares: Heap buffer over read in aresparsesoareply CVE-2020-22217 c-ares: Buffer Underwrite in aresinetnetpton CVE-2023-31130 For more details about the security issues,...
CentOS 8 : protobuf-c (CESA-2023:6944)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:6944 advisory. - protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember. CVE-2022-48468 Note that Nessus has not tested for this issue but has instead...
RHEL 8 : c-ares (RHSA-2023:7207)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7207 advisory. The c-ares C library defines asynchronous DNS Domain Name System requests and provides name resolving API. Security Fixes: c-ares: Heap buff...
RHEL 8 : protobuf-c (RHSA-2023:6944)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6944 advisory. The protobuf-c packages provide C bindings for Google's Protocol Buffers. Security Fixes: protobuf-c: unsigned integer overflow in parserequiredmembe...
VulnCheck KEV: CVE-2022-34753
A CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote root exploit when the command is compromised. Affected Products: SpaceLogic C-Bus Home Controller 5200WHC2, formerly known as C-Bus Wiser Homer...
The vulnerability of the GNU C Library’s system library lies in the improper release of memory before deleting the last reference, allowing a hacker to trigger a service failure.
The vulnerability of the GNU C Library is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
RLSA-2023:6746 Important: nghttp2 security update
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset Attack CVE-2023-44487 For more details about the security issues, including the impact, a CV...
c-ares security, bug fix, and enhancement update
1.19.1-1 - Resolves: rhbz2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARESRANDOMFILE during cross compilation rhel-9 - Resolves: rhbz2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in aresinetnetpton rhel-9 - Resolves: rhbz2209550 - CVE-2023-31147 c-ares: Insufficient randomness in...
The vulnerability of the tif_jbig.c component of the JBIG1 data compression standard, which is used for working with JBIG images in the JBIG-KIT framework, allows a hacker to cause a service failure.
The vulnerability of the tifjbig.c component of the JBIG1 data compression standard, which is used for processing JBIG images, in the JBIG-KIT framework, relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to...
The vulnerability of the handle_symtab function in the readelf.c component of the ELF modification and analysis utility Elfutils allows a attacker to cause a service failure.
The vulnerability in the handlesymtab function of the readelf.c component of the ELF modification and analysis tool Elfutils involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created fil...