5910 matches found
[SECURITY] Fedora 42 Update: crosswords-puzzle-sets-xword-dl-0.4.8-1.fc42
Download crossword puzzles for GNOME Crosswords from assorted newspapers using xword-dl...
CVE-2025-2722
A vulnerability was found in GNOME libgsf up to 1.14.53. It has been declared as critical. This vulnerability affects the function gsfpropsettingscollectva. The manipulation of the argument nallocedparams leads to heap-based buffer overflow. Local access is required to approach this attack. The...
CVE-2025-2721
A vulnerability was found in GNOME libgsf up to 1.14.53. It has been classified as critical. This affects the function gsfbase64encodesimple. The manipulation of the argument sizet leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was contacted early about th...
Security Bulletin: IBM Security Guardium is affected by multiple OS level vulnerabilities
Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID:CVE-2022-1941 DESCRIPTION: protobuf is vulnerable to a denial of service, caused by a parsing vulnerability for the MessageSet type in the ProtocolBuffers. By sending a specially crafted message with multiple...
CVE-2025-2724
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the only way to get an object of type GsfMSOleSortingKey is via...
CVE-2025-2724
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the only way to get an object of type GsfMSOleSortingKey is via...
UBUNTU-CVE-2025-2724
A vulnerability classified as problematic has been found in GNOME libgsf up to 1.14.53. Affected is the function sortingkeycopy. The manipulation of the argument Name leads to out-of-bounds read. It is possible to launch the attack on the local host. The vendor was contacted early about this...
CVE-2025-2724
CVE-2025-2724 relates to GNOME LibGSF’s sorting_key_copy function. Affected is the sorting_key_copy operation where manipulating the Name argument can cause an out-of-bounds read, potentially enabling local impact. Red Hat notes limited or no mitigations meeting security criteria. Ubuntu/Ubuntu-d...
CVE-2025-2724
Removed by vendor...
CVE-2025-2722
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the call is invalid because pnparam is an input-output parameter...
CVE-2025-2722
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the call is invalid because pnparam is an input-output parameter...
CVE-2025-2723
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the call is invalid as the buffer pointed to by "data" must have...
CVE-2025-2723
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the call is invalid as the buffer pointed to by "data" must have...
UBUNTU-CVE-2025-2722
A vulnerability was found in GNOME libgsf up to 1.14.53. It has been declared as critical. This vulnerability affects the function gsfpropsettingscollectva. The manipulation of the argument nallocedparams leads to heap-based buffer overflow. Local access is required to approach this attack. The...
UBUNTU-CVE-2025-2723
A vulnerability was found in GNOME libgsf up to 1.14.53. It has been rated as critical. This issue affects the function gsfpropertysettingscollec. The manipulation of the argument nallocedparams leads to heap-based buffer overflow. Attacking locally is a requirement. The vendor was contacted earl...
CVE-2025-2723
CVE-2025-2723 is a confirmed issue in GNOME libgsf affecting the gsf_property_settings_collec function, where manipulation of the n_alloced_params argument can cause a heap-based buffer overflow. Public sources describe it for GNOME libgsf up to 1.14.53, with local access often noted as a prerequ...