18314 matches found
AlmaLinux 9 : c-ares (ALSA-2024:3842)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:3842 advisory. c-ares: Out of bounds read in aresreadline CVE-2024-25629 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note...
CLSA-2024-1718270850 Fix CVE(s): CVE-2023-4016
SECURITY UPDATE: Ability to write almost unlimited amounts of unfiltered data into the process heap - debian/patches/CVE-2023-4016-2.patch: ps: extended fix of the CVE-2023-4016 - fix possible buffer overflow in -C option. - CVE-2023-4016...
AZL-42652 CVE-2023-52890 affecting package ntfs-3g for versions less than 2022.10.3-2
NTFS-3G before 75dcdc2 has a use-after-free in ntfsuppercasembs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging...
CVE-2024-35326
CVE-2024-35326 is rejected/not used; this entry does not represent an active vulnerability.
Google Pixel Security Breach
Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from an integer overflow in the wlnotifyrxmgmtframe module of wlcfg80211.c, where an out-of-bounds write may exist...
Google Pixel Security Breach
Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which originates from the presence of uninitialized data in the hwbccnsdeprivilege module of trusty/user/base/lib/hwbcc/client/hwbcc.c. There is a potential for uninitialized stack data...
Google Pixel Security Breach
Google Pixel is a smartphone from Google, Inc USA. A security vulnerability exists in Google Pixel, which stems from an uninitialized data in the aurgetstate module of aurora.c, which could lead to information disclosure...
Number withdrawn
GNU gdb is a GNU project debugger from the American GNU community. It supports debugging C, C++, Pascal, and FORTRAN programming languages. This CVE number has been withdrawn...
Oracle Linux 9 : c-ares (ELSA-2024-3842)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3842 advisory. 1.19.1-2 - Resolves: RHEL-26529 - Out of bounds read in aresreadline rhel-9 Tenable has extracted the preceding description block directly from the Oracle Linux...
RHEL 9 : c-ares (RHSA-2024:3842)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3842 advisory. The c-ares C library defines asynchronous DNS Domain Name System requests and provides name resolving API. Security Fixes: c-ares: Out of bounds read...
RHEL 8 : protobuf-c (RHSA-2024:3812)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3812 advisory. The protobuf-c packages provide C bindings for Google's Protocol Buffers. Security Fixes: protobuf-c: unsigned integer overflow in parserequiredmembe...
Low: Red Hat Security Advisory: c-ares security update
An update for c-ares is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
c-ares: Out of bounds read in ares__read_line()
A vulnerability was found in c-ares where the aresreadline is used to parse local configuration files such as /etc/resolv.conf, /etc/nsswitch.conf, the HOSTALIASES file, and if using a c-ares version prior to 1.22.0, the /etc/hosts file. If the configuration files have an embedded NULL character ...
protobuf-c: unsigned integer overflow in parse_required_member
A vulnerability was found in protobuf-c. This security flaw leads to an unsigned integer overflow in parserequiredmember...
Moderate: Red Hat Security Advisory: protobuf-c security update
An update for protobuf-c is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
c-ares security update
1.19.1-2 - Resolves: RHEL-26529 - Out of bounds read in aresreadline rhel-9...
Low: c-ares security update
The c-ares C library defines asynchronous DNS Domain Name System requests and provides name resolving API. Security Fixes: c-ares: Out of bounds read in aresreadline CVE-2024-25629 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
ALSA-2024:3842 Low: c-ares security update
The c-ares C library defines asynchronous DNS Domain Name System requests and provides name resolving API. Security Fixes: c-ares: Out of bounds read in aresreadline CVE-2024-25629 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
CVE-2024-36405
liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. A control-flow timing lean has been identified in the reference implementation of the Kyber key encapsulation mechanism when it is compiled with Clang 15-18 for -Os, -O1, and other...