EulerOS Virtualization 3.0.2.6 : c-ares (EulerOS-SA-2021-2882)

According to the versions of the c-ares package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can...

dhrystone buffer overflow vulnerability

dhrystone is a comprehensive benchmark program for system integer programming from the personal developer Reinhold P. Weicker. dhrystone suffers from a buffer error vulnerability stemming from a null pointer dereference in the main function dhry1.c of dhrystone 2.1, which could be exploited by an...

Expat has an unspecified vulnerability

Expat is a fast streaming XML parser written in C. A security vulnerability exists in Expat, which stems from the fact that in Expat aka libexpat prior to 2.4.3, the storeAtts function in xmlparse.c shifted left by 29 or more bits may cause realloc misbehavior e.g., allocating too few bytes too...

CVE-2021-41141

CVE-2021-41141 affects PJSIP PJPROJECT. Root cause: in multiple code paths, errors/failures cause a function to return without releasing held locks, potentially deadlocking the system and causing denial of service. Affected versions: all up to and including 2.11.1. Mitigation: upgrades fixed in a...

CVE-2020-23026

A NULL pointer dereference in the main function dhry1.c of dhrystone 2.1 causes a denial of service DoS...

AZL-8960 CVE-2021-45953 affecting package dnsmasq for versions less than 2.89-1

Dnsmasq 2.86 has a heap-based buffer overflow in extractname called from hashquestions and fuzzutil.c. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

SQLite report about CVE-2022-35737

This bug is an array-bounds overflow. The bug is only accessible when using some of the C-language APIs provided by SQLite. The bug cannot be reached using SQL nor can it be reached by providing SQLite with a corrupt database file. The bug only comes up when very long string inputs greater than 2...

CVE-2021-45957

Removed by vendor...

openSUSE 15 Security Update : c-toxcore (openSUSE-SU-2021:1640-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1640-1 advisory. - A stack-based buffer overflow in handlerequest function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 caused by an improper...

Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2021-2882)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2021:1640-1 Security update for c-toxcore

c-toxcore was updated fo fix a securiy issue: - CVE-2021-44847: Fixed a buffer overflow in handlerequest in DHT.c which could lead to remote DoS and potential code execution boo1193667...

Security update for c-toxcore (moderate)

openSUSE Security Update: Security update for c-toxcore Announcement ID: openSUSE-SU-2021:1640-1 Rating: moderate References: 1193667 Cross-References: CVE-2021-44847 Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP3 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 An...

Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2021-2841)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.0 : c-ares (EulerOS-SA-2021-2841)

According to the versions of the c-ares package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can...

Security Bulletin: Apache Log4j vulnerability in DCNM Network Management Software used by IBM c-type SAN directors and switches.

Summary Apache Log4j Java logging library vulnerability - CVE-2021-44228 affecting versions prior to v2.15 impacts DCNM Network Management Software. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on the system, caused ...

Security Bulletin: Apache Log4j vulnerability in DCNM Network Management Software used by IBM c-type SAN directors and switches.

Summary Apache Log4j Java logging library vulnerability - CVE-2021-45046 affecting versions prior to v2.16 impacts DCNM Network Management Software. Vulnerability Details CVEID: CVE-2021-45046 DESCRIPTION: Apache Log4j could result in remote code execution, caused by an incomplete fix of...

The vulnerability of the iconv utility in the GNU C Library (glibc) system library involves a program entering an infinite loop, allowing an attacker to cause a service failure.

The vulnerability of the iconv utility in the GNU C Library glibc is related to it entering an infinite loop. Exploiting this vulnerability can allow an attacker to perform a denial-of-service attack...

Microsoft Windows Explorer Preview Pane Security Bypass Vulnerability

Previewing a WMA/WMV media format on Windows Explorer through its Preview Pane causes embedded URLs to be automatically opened in the default browser without displaying any prompt. Exploit Title: Windows Explorer Preview Pane WMV/WMA media Automatic URI Opening Vulnerability Exploit Author: Eduar...

CVE-2021-43552

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX PIC iX Versions B.02, C.02, and C.03...

CVE-2021-43548

Patient Information Center iX PIC iX Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly...