[SECURITY] Fedora 35 Update: bash-5.1.8-3.fc35

The GNU Bourne Again shell Bash is a shell or command language interpreter that is compatible with the Bourne shell sh. Bash incorporates useful features from the Korn shell ksh and the C shell csh. Most sh scripts can be run by bash without modification...

PT-2022-5102 · Cisco · Cisco Telepresence Vcs +1

Name of the Vulnerable Software and Affected Versions: Cisco Expressway-C affected versions not specified Cisco TelePresence VCS affected versions not specified Description: A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an...

PT-2022-6686 · Ashlar Vellum · Ashlar-Vellum Graphite

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Graphite affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this issue, where th...

[SECURITY] Fedora 35 Update: libdxfrw-1.1.0-0.1.rc1.fc35

libdxfrw is a free C++ library to read and write DXF files in both formats, ASCII and binary form...

The vulnerability of the `sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S` component of the GNU C Library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S component of the GNU C Library is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

Debian: Security Advisory (DLA-3130-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-53128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the fs/ntfs3 component. A UBSAN Undefined Behavior Sanitizer error can occur in the true sectors per clst function, specifically due to a...

Incident Response Services & Playbooks Guide

63% of c-level executives in the US don’t have an incident response plan yet 50% of organizations experience a cyberattack. Explore incident response services and playbooks to strengthen your cyber defenses...

DEBIAN-CVE-2022-32166

In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution...

Open vSwitch 缓冲区错误漏洞

Open vSwitch is an open source virtual switch. A buffer error vulnerability exists in Open vSwitch versions v0.90.0 through v2.5.0, which stems from a heap buffer over-read in flow.c. An unsafe comparison of the minimasks function may result in access to unmapped memory regions, which can be...

The vulnerability of the `glob` function in the `glob.c` component of the GNU C Library allows a attacker to cause a service failure.

The vulnerability of the glob function in the glob.c component of the GNU C Library is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

Caryll OTFCC otfccdump+0x4fbbb6 denial of service vulnerability

Caryll OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A denial of service vulnerability exists in Caryll OTFCC, which originates from a segmentation conflict at /release-x64/otfccdump+0x4fbbb6. An attacker can exploit the vulnerability t...

Caryll OTFCC otfccdump+0x4fe954 denial of service vulnerability

Caryll OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A denial of service vulnerability exists in Caryll OTFCC, which originates from a segmentation conflict at /release-x64/otfccdump+0x4fe954. An attacker can exploit the vulnerability t...

The vulnerability of C and C++ garbage collectors using Boehm-Demers-Weiser GC allows a intruder to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of garbage collectors in C and C++ languages, such as Boehm-Demers-Weiser GC, involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and ev...

Vulnerability of the al__cpLocation stream function in libpthread, LinuxThreads libraries uClibC and uClibC-ng, allowing a hacker to execute arbitrary code

The vulnerabilities of the alcpLocation function in the libpthread library, as well as those in the linuxthreads library and uClibC and uClibC-ng libraries, are related to the possibility of memory corruption. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code by...

The vulnerabilities of the `fillin_rpath` and `decompose_rpath` functions in the GNU C Library allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fillinrpath and decomposerpath functions in the GNU C Library’s system library is related to an unreliable search path. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the gchar_cursor function in the misc1.c text editor Vim allows a hacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the gcharcursor function in the misc1.c file of the Vim text editor involves reading data beyond the allowable buffer limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

[SECURITY] Fedora 37 Update: knot-resolver-5.5.3-1.fc37

The Knot Resolver is a DNSSEC-enabled caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is...

SUSE: Security Advisory (SUSE-SU-2022:3401-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OTFCC has an unspecified vulnerability (CNVD-2023-11793)

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files. OTFCC has a security vulnerability that stems from a segmentation violation located at its /multiarch/memmove-vec-unaligned-erms.S. No detailed vulnerability details are currently available...