Heap-based Buffer Overflow

libmodbus.so is vulnerable to heap-based buffer overflow. The vulnerability exists in modbusreply function at src/modbus.c because it does not check for the null values earlier. which allows an attacker to cause a buffer overflow...

CVE-2022-0367

A heap-based buffer overflow flaw was found in libmodbus in function modbusreply in src/modbus.c...

CVE-2022-0367

A heap-based buffer overflow flaw was found in libmodbus in function modbusreply in src/modbus.c...

CVE-2022-0367

CVE-2022-0367 affects libmodbus; a heap-based buffer overflow was found in modbus_reply() (src/modbus.c). Public advisories and multiple Debian/openSUSE/Nessus entries confirm this vulnerability and have issued security updates to libmodbus packages (e.g., Debian 3.1.4-2+deb10u2, 3.1.6-2+deb11u1;...

Debian dla-3082 : exim4 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3082 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3082-1 [email protected] https://www.debian.org/lts/security/...

CVE-2022-2915

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service DoS on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions...

CVE-2022-2915

CVE-2022-2915 is a heap-based buffer overflow in SonicWall SMA100 firmware that affects 10.2.1.5-34sv and earlier. An authenticated remote attacker can cause DoS and potentially code execution. Remediation: upgrade to SMA100 10.2.1.6-37sv or later as noted by SonicWall advisories; exploitation st...

Ubuntu: Security Advisory (USN-849-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : bluez (SUSE-SU-2022:2900-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2900-1 advisory. - CVE-2019-8922: Fixed a buffer overflow in the implementation of the Service Discovery Protocol bsc1193227. Tenable ha...

Ubuntu: Security Advisory (USN-853-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-2991

A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and...

CVE-2022-2991

A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and...

CVE-2022-2991

A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and...

SonicWall SMA100 Post-Auth Heap-based Buffer Overflow Vulnerability

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service DoS on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions.IMPORTANT: SMA 1000 series...

SUSE SLES15 Security Update : bluez (SUSE-SU-2022:2864-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2864-1 advisory. - CVE-2019-8922: Fixed a buffer overflow in the implementation of the Service Discovery Protocol bsc1193227. Tenable has extracted the...

CVE-2022-26061

A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-26061

A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-26061

A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-26061

CVE-2022-26061 describes a heap-based buffer overflow in the gif2h5 functionality of libhdf5 (HDF5 Group) up to version 1.10.4. A specially crafted GIF file can lead to code execution. Affected component: HDF5 libhdf5 1.10.4, function gif2h5. Root cause: heap overflow in GIF-to-HDF5 conversion pa...

CVE-2022-26061

A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...