EulerOS Virtualization 2.10.1 : pixman (EulerOS-SA-2023-1895)

According to the versions of the pixman package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an...

Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

EulerOS Virtualization 2.10.1 : vim (EulerOS-SA-2023-1912)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. CVE-2022-3491 - Heap-based Buffer Overflow in GitHub...

EulerOS Virtualization 2.10.0 : pixman (EulerOS-SA-2023-1926)

According to the versions of the pixman package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an...

EulerOS Virtualization 2.10.0 : vim (EulerOS-SA-2023-1943)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. CVE-2022-3491 - Heap-based Buffer Overflow in GitHub...

Oracle Linux 9 : libguestfs-winsupport (ELSA-2023-2179)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-2179 advisory. 9.2-1 - Rebase to ntfs-3g 2022.5.17 - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785, CVE-2022-30786, CVE-2022-30787,...

Heap-based Buffer Overflow

netatalk is vulnerable to Heap-based Buffer Overflow. The vulnerability is found within 'dsiwriteinit' function due to a lack of validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer allowing a malicious attacker to execute arbitrary code...

AlmaLinux 9 : libguestfs-winsupport (ALSA-2023:2179)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2023:2179 advisory. - ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+5123-2. NOTE: the upstream position is that ntfsck is deprecated;...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2023-1858)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. CVE-2022-3491 - Use After Free in GitHub repository vim/vim prior to...

RHEL 9 : gdk-pixbuf2 (RHSA-2023:2216)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2216 advisory. The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by...

RHEL 9 : libguestfs-winsupport (RHSA-2023:2179)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:2179 advisory. The libguestfs-winsupport package adds support for Windows guests to libguestfs, a set of tools and libraries allowing users to access and...

Heap overflow

Adobe Substance 3D Painter versions 8.3.0 and earlier is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-29283

CVE-2023-29283 affects Adobe Substance 3D Painter (versions 8.3.0 and earlier). A heap-based Buffer Overflow occurs in USD file parsing, enabling arbitrary code execution in the user’s context. Exploitation requires user interaction (open malicious file or visit a crafted page). Affected product/...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1858)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-27385

CVE-2023-27385 concerns Omron CX-Drive. Affected: CX-Drive versions V3.01 and earlier. Vulnerability: heap-based buffer overflow (CWE-122) in CX-Drive when a user opens a specially crafted SDD file, potentially allowing arbitrary code execution and/or information disclosure. Root cause: heap over...

CVE-2023-27385

Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary code may be executed and/or information may be disclosed...

CVE-2023-27410

A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. A heap-based buffer overflow vulnerability was found in the edgeboxwebapp binary. The binary will crash if supplied with a backup password longer than 255 characters. This could allow an authenticated privileged attacker t...

Heap overflow

A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. A heap-based buffer overflow vulnerability was found in the edgeboxwebapp binary. The binary will crash if supplied with a backup password longer than 255 characters. This could allow an authenticated privileged attacker t...

CVE-2023-27410

A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. A heap-based buffer overflow vulnerability was found in the edgeboxwebapp binary. The binary will crash if supplied with a backup password longer than 255 characters. This could allow an authenticated privileged attacker t...

Moderate: Red Hat Security Advisory: libguestfs-winsupport security update

An update for libguestfs-winsupport is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...