Adobe ColdFusion < 2018.x < 2018u15 / 2021.x < 2021u5 Multiple Vulnerabilities (APSB22-44)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 15 or 2021.x update 5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-44 advisory. - Stack-based Buffer Overflow CWE-121 potentially leading to Arbitrary code executi...

CVE-2022-37864

A vulnerability has been identified in Solid Edge All Versions SE2022MP9. The affected application contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process...

Heap-based Buffer Overflow

tcppreplay is vulnerable to heap-based buffer overflow. The vulnerability exists in the parsempls in get.c which allows an attacker to cause buffer overflows...

EulerOS Virtualization 3.0.6.0 : vim (EulerOS-SA-2022-2594)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Out-of-bounds Read CVE-2021-4166, CVE-2021-4193 - vim is vulnerable to Use After Free CVE-2021-4192 - vim is...

Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2022-2488)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : aide (EulerOS-SA-2022-2544)

According to the versions of the aide package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs...

EulerOS Virtualization 3.0.6.0 : virglrenderer (EulerOS-SA-2022-2595)

According to the versions of the virglrenderer packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8...

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2022-2430)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : zlib (ALAS-2022-1849)

The version of zlib installed on the remote host is prior to 1.2.7-19. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1849 advisory. A security vulnerability was found in zlib. The flaw triggered a heap-based buffer in inflate in the inflate.c function via a large...

EulerOS Virtualization 3.0.6.6 : vim (EulerOS-SA-2022-2541)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3927, CVE-2021-3984, CVE-2021-4019, CVE-2022-0213 - vim is vulnerable to Us...

EulerOS Virtualization 3.0.6.6 : ghostscript (EulerOS-SA-2022-2499)

According to the versions of the ghostscript packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for...

EulerOS 2.0 SP8 : libjpeg-turbo (EulerOS-SA-2022-2467)

According to the versions of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer...

EulerOS Virtualization 3.0.6.6 : bluez (EulerOS-SA-2022-2488)

According to the versions of the bluez packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVCATTRREQ by the SDP...

EulerOS Virtualization 3.0.6.6 : binutils (EulerOS-SA-2022-2487)

According to the versions of the binutils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visua...

EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-2483)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-2436)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 8.2. CVE-2022-1898, CVE-2022-2042 - Heap-based Buffer Overflow in GitHub repository vim/vim...

EulerOS 2.0 SP10 : libjpeg-turbo (EulerOS-SA-2022-2430)

According to the versions of the libjpeg-turbo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-2423)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 8.2. CVE-2022-1898, CVE-2022-2042 - Heap-based Buffer Overflow in GitHub repository vim/vim...

EulerOS 2.0 SP5 : libjpeg-turbo (EulerOS-SA-2022-2442)

According to the versions of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer...

EulerOS 2.0 SP10 : libjpeg-turbo (EulerOS-SA-2022-2417)

According to the versions of the libjpeg-turbo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer...