RHEL 7 : unixodbc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - unixODBC: out of bounds stack write due to pointer-to-integer types conversion CVE-2024-1013 Note that Nessus has n...

glibc: Out of bounds write in iconv may lead to remote code execution

An out-of-bounds write flaw was found in the ISO-2022-CN-EXT plugin for glibc's iconv library. When converting from UCS4 charset, adding certain escape charterers is required to indicate where the charset was changed to the library. During this process, iconv improperly checks the boundaries of...

SUSE-SU-2024:1525-1 Security update for SUSE Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: - CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master bsc1219430 - CVE-2024-22232: Prevent directory traversal attacks in the master's servefile method bsc1219431 - Convert oscap output to UTF-8 -...

SUSE-SU-2024:1518-1 Security update for SUSE Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: - Security issues fixed: CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master bsc1219430 CVE-2024-22232: Prevent directory traversal attacks in the master's servefile method bsc1219431 - Bugs fixed...

openweave:FuzzCertificateConversion: Global-buffer-overflow in nl::Weave::TLV::TLVWriter::WriteData

Detailed Report: https://oss-fuzz.com/testcase?key=4551760669638656 Project: openweave Fuzzing Engine: libFuzzer Fuzz Target: FuzzCertificateConversion Job Type: libfuzzerasanopenweave Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x5b656a8a0fe0 Crash State:...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a level3 conversion error in the swsuspsave function...

woff2:convert_woff2ttf_fuzzer_new_entry: Use-of-uninitialized-value in convert_woff2ttf_fuzzer_new_entry.cc

Project: https://github.com/google/woff2.git Detailed Report: https://oss-fuzz.com/testcase?key=4701552385261568 Project: woff2 Fuzzing Engine: libFuzzer Fuzz Target: convertwoff2ttffuzzernewentry Job Type: libfuzzermsanwoff2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

SUSE CVE-2022-48657

In the Linux kernel, the following vulnerability has been resolved: arm64: topology: fix possible overflow in amufiesetup cpufreqgethwmaxfreq returns max frequency in kHz as unsigned int, while freqinvsetmaxratio gets passed this frequency in Hz as 'u64'. Multiplying max frequency by 1000 can...

DEBIAN-CVE-2022-48657

In the Linux kernel, the following vulnerability has been resolved: arm64: topology: fix possible overflow in amufiesetup cpufreqgethwmaxfreq returns max frequency in kHz as unsigned int, while freqinvsetmaxratio gets passed this frequency in Hz as 'u64'. Multiplying max frequency by 1000 can...

UBUNTU-CVE-2022-48657

In the Linux kernel, the following vulnerability has been resolved: arm64: topology: fix possible overflow in amufiesetup cpufreqgethwmaxfreq returns max frequency in kHz as unsigned int, while freqinvsetmaxratio gets passed this frequency in Hz as 'u64'. Multiplying max frequency by 1000 can...

openSUSE Security Advisory (openSUSE-SU-2024:0113-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : dcmtk (openSUSE-SU-2024:0113-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0113-1 advisory. - An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOIPList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted...

OPENSUSE-SU-2024:0113-1 Security update for dcmtk

This update for dcmtk fixes the following issues: Fixed incorrect type conversion in the DVPSSoftcopyVOIPList:createFromImage functionality of OFFIS DCMTK boo1223324, CVE-2024-28130 - Add missing requirements for dcmtk-devel boo1220809 - Update to 3.6.8 See DOCS/CHANGES.368 for the full list of...

Hyperion 输入验证错误漏洞

Hyperion is an open source bias or ambient lighting implementation of the Hyperion project. An input validation error vulnerability exists in Hyperion version 2.0.15 that stems from the presence of a Unicode conversion vulnerability that could allow an attacker to send Unicode characters with a...

SUSE CVE-2024-28130

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOIPList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

DEBIAN-CVE-2024-28130

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOIPList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-28130

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOIPList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-28130

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOIPList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-28130

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOIPList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-28130

CVE-2024-28130 affects OFFIS DCMTK 3.6.8 (DVPSSoftcopyVOI_PList::createFromImage) with a malformed file enabling arbitrary code execution. Public references in Debian (DCMTK 3.6.5-1+deb11u1 fix), Ubuntu security advisory USN-7010-1, and Fedora dcmtk 3.6.9-2.fc42 indicate multiple distributions ha...