13899 matches found
NewStart CGSL MAIN 6.02 : dpdk Multiple Vulnerabilities (NS-SA-2021-0073)
The remote NewStart CGSL host, running version MAIN 6.02, has dpdk packages installed that are affected by multiple vulnerabilities: - A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the...
Vulnerability of the bj10v_print_page() function (contrib/japanese/gdev10v.c) in the software suite for processing, transforming, and generating Ghostscript documents, allowing a hacker to trigger a service failure
The vulnerability of the bj10vprintpage function contrib/japanese/gdev10v.c in the software suite for processing, transforming, and generating Ghostscript documents is related to a division by zero error. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2021-28040
An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...
CVE-2021-28040
An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...
CVE-2021-28040
An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...
CVE-2021-28040
An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...
CVE-2021-28040
CVE-2021-28040 describes an uncontrolled recursion in OSSEC 3.6.0 due to unrestrained recursion in os_xml.c when processing a large number of opening/closing XML tags. The recursion in _ReadElem can cause a segmentation fault once unmapped memory is reached. This entry provides no exploit details...
OSSEC 安全漏洞
Scott R. Shinn OSSEC is Scott R. Shinn an open source application. OSSEC provides a simple, powerful and open source solution that combines all aspects of HIDS Host Based Intrusion Detection, log monitoring and SIM,SIEM. A security vulnerability exists in OSSEC 3.6.0, which stems from the...
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-1382)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Grid. Locked.
In the UK we are used to having a reliable and stable electricity grid. So stable that you can keep time with it. Before quartz clocks became common, mains powered clocks used the electricity grid frequency of 50Hz as their time reference, you can still find the odd central heating timer or old...
EulerOS Virtualization for ARM 64 3.0.6.0 : lua (EulerOS-SA-2021-1545)
According to the version of the lua packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by...
Fedora 32 : libmysofa (2021-4e40ccb5e6)
The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-4e40ccb5e6 advisory. - Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and...
Fedora 32 : radare2 (2021-e3c95619c1)
The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-e3c95619c1 advisory. - radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parsetypedef in typedwarf.c via a malformed DWATnam...
Oracle Linux 7 : xterm (ELSA-2021-0617)
The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-0617 advisory. - Backport security fix for CVE-2021-27135 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
EulerOS 2.0 SP2 : gdb (EulerOS-SA-2021-1296)
According to the versions of the gdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service segmentation fault and crash via a crafted binary,...
Important: glibc
Issue Overview: The iconv program in the GNU C Library aka glibc or libc6 2.31 and earlier, when invoked with multiple suffixes in the destination encoding TRANSLATE or IGNORE along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial...
ALPINE-CVE-2021-27138
The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT...
Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part Two)
In this post, we continue our analysis of the SolarCity ConnectPort X2e Zigbee device referred to throughout as X2e device. In Part One, we discussed the X2e at a high level, performed initial network-based attacks, then discussed the hardware techniques used to gain a remote shell on the X2e...
Denial Of Service (DoS)
xterm is vulnerable to denial of service. A remote attacker is able to crash the application via a segmentation fault using a malicious UTF-8 character sequence...