18412 matches found
The vulnerability of the res_query function in the GNU C Library’s system library allows a attacker to cause a service failure.
The vulnerability of the resquery function in the GNU C Library’s system library is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the `makecontext` function in the GNU C Library allows a malicious actor to induce a service failure.
The vulnerability of the makecontext function in the GNU C Library is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
The vulnerability of the GNU C Library’s system library, related to the execution of operations beyond the buffer boundaries in memory, allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the GNU C Library is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the getaddrinfo function in the GNU C Library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.
The vulnerability of the getaddrinfo function in the GNU C Library is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
CentOS 8 : protobuf-c (CESA-2023:6944)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:6944 advisory. - protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember. CVE-2022-48468 Note that Nessus has not tested for this issue but has instead...
RHEL 8 : c-ares (RHSA-2023:7207)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7207 advisory. The c-ares C library defines asynchronous DNS Domain Name System requests and provides name resolving API. Security Fixes: c-ares: Heap buff...
RHEL 8 : protobuf-c (RHSA-2023:6944)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6944 advisory. The protobuf-c packages provide C bindings for Google's Protocol Buffers. Security Fixes: protobuf-c: unsigned integer overflow in parserequiredmembe...
ALSA-2023:7207 Moderate: c-ares security update
The c-ares C library defines asynchronous DNS Domain Name System requests and provides name resolving API. Security Fixes: c-ares: Heap buffer over read in aresparsesoareply CVE-2020-22217 c-ares: Buffer Underwrite in aresinetnetpton CVE-2023-31130 For more details about the security issues,...
ALSA-2023:6944 Moderate: protobuf-c security update
The protobuf-c packages provide C bindings for Google's Protocol Buffers. Security Fixes: protobuf-c: unsigned integer overflow in parserequiredmember CVE-2022-48468 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, ref...
The vulnerability of the GNU C Library’s system library lies in the improper release of memory before deleting the last reference, allowing a hacker to trigger a service failure.
The vulnerability of the GNU C Library is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
VulnCheck KEV: CVE-2022-34753
A CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote root exploit when the command is compromised. Affected Products: SpaceLogic C-Bus Home Controller 5200WHC2, formerly known as C-Bus Wiser Homer...
RLSA-2023:6746 Important: nghttp2 security update
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack Rapid Reset Attack CVE-2023-44487 For more details about the security issues, including the impact, a CV...
c-ares security, bug fix, and enhancement update
1.19.1-1 - Resolves: rhbz2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARESRANDOMFILE during cross compilation rhel-9 - Resolves: rhbz2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in aresinetnetpton rhel-9 - Resolves: rhbz2209550 - CVE-2023-31147 c-ares: Insufficient randomness in...
The vulnerability of the tif_jbig.c component of the JBIG1 data compression standard, which is used for working with JBIG images in the JBIG-KIT framework, allows a hacker to cause a service failure.
The vulnerability of the tifjbig.c component of the JBIG1 data compression standard, which is used for processing JBIG images, in the JBIG-KIT framework, relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to...
protobuf-c security update
1.3.3-13 - Applied patch for for CVE-2022-48468 2186677...
The vulnerability of the handle_symtab function in the readelf.c component of the ELF modification and analysis utility Elfutils allows a attacker to cause a service failure.
The vulnerability in the handlesymtab function of the readelf.c component of the ELF modification and analysis tool Elfutils involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created fil...
OESA-2023-1801 shim security update
Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments. Security Fixes: A vulnerability classified as critical has been found in rhboot shim up to 15.7 on ARM. This affects the function mirroroneesl of the file mok.c of the component mok...
Huawei EulerOS: Security Advisory for json-c (EulerOS-SA-2023-3181)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for json-c (EulerOS-SA-2023-3216)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
