18501 matches found
SUSE CVE-2023-0341
A stack buffer overflow exists in the ecglob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution. editorconfig-core-c v0.12.6 resolved this vulnerability by bound checking all write operations over th...
GLSA-202305-04 : dbus-broker: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202305-04 dbus-broker: Multiple Vulnerabilities - An issue was discovered in dbus-broker before 31. It depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a...
Fedora: Security Advisory for libsignal-protocol-c (FEDORA-2023-8b0938312e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for libsignal-protocol-c (FEDORA-2023-6cfe134db6)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for libsignal-protocol-c (FEDORA-2023-4e094d5297)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: libsignal-protocol-c-2.3.3-7.fc36
This is a ratcheting forward secrecy protocol that works in synchronous and asynchronous messaging environments...
[SECURITY] Fedora 38 Update: libsignal-protocol-c-2.3.3-9.fc38
This is a ratcheting forward secrecy protocol that works in synchronous and asynchronous messaging environments...
Fedora 38 : libsignal-protocol-c (2023-4e094d5297)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4e094d5297 advisory. Backport a fix for CVE-2022-48468 for protobuf-c, which is bundled in libsignal-protocol-c...
Fedora 36 : libsignal-protocol-c (2023-8b0938312e)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8b0938312e advisory. Backport a fix for CVE-2022-48468 for protobuf-c, which is bundled in libsignal-protocol-c...
Fedora 37 : libsignal-protocol-c (2023-6cfe134db6)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-6cfe134db6 advisory. Backport a fix for CVE-2022-48468 for protobuf-c, which is bundled in libsignal-protocol-c...
Malicious code in she-c (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c543fa7808e46aec1ba9687ac00385f262346a6bd46a73bb090a010dfe985d76 The OpenSSF Package Analysis project identified 'she-c' @ 2.2.8 npm as malicious. It is considered malicious because: - The package communicates...
MAL-2023-1293 Malicious code in she-c (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c543fa7808e46aec1ba9687ac00385f262346a6bd46a73bb090a010dfe985d76 The OpenSSF Package Analysis project identified 'she-c' @ 2.2.8 npm as malicious. It is considered malicious because: - The package communicates...
OESA-2023-1256 protobuf-c security update
This is protobuf-c, a C implementation of the Google Protocol Buffers data serialization format. Security Fixes: protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember.CVE-2022-48468...
OESA-2023-1255 protobuf-c security update
This is protobuf-c, a C implementation of the Google Protocol Buffers data serialization format. Security Fixes: protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember.CVE-2022-48468...
SUSE: Security Advisory (SUSE-SU-2023:1979-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 Security Update : protobuf-c (SUSE-SU-2023:1979-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1979-1 advisory. - CVE-2022-48468: Fixed an unsigned integer overflow. bsc1210323 Tenable has extracted the preceding description block directly from the SUS...
DEBIAN-CVE-2023-25815
In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages at all, and skips the gettext initialization. However, due to a change in MINGW-packages, the gettext function's implicit initialization no...
CVE-2023-25815
In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages at all, and skips the gettext initialization. However, due to a change in MINGW-packages, the gettext function's implicit initialization no...
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the parseexpr5 function in the /nasm/nasm-parse.c file. Remediation There is no fixed version for yasm. References - GitHub Issue - PoC Credit: z1r00...