PT-2023-2744 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Painter versions 8.3.0 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1815)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. CVE-2023-1170 - Incorrect Calculation of Buffer Size in GitHub repositor...

ALSA-2023:2179 Moderate: libguestfs-winsupport security update

The libguestfs-winsupport package adds support for Windows guests to libguestfs, a set of tools and libraries allowing users to access and modify virtual machine VM disk images. Security Fixes: ntfs-3g: heap-based buffer overflow in ntfsck CVE-2021-46790 ntfs-3g: crafted NTFS image can cause heap...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-1833)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. CVE-2023-1170 - Incorrect Calculation of Buffer Size in GitHub repositor...

Denial Of Services (DoS)

Netatalk is vulnerable to Denial Of Services DoS. The vulnerability exists due to the heap-based buffer overflow in afpgetappl, resulting in code execution through the .appl file, allowing an attacker to cause an application crash and access root on some platforms such as FreeBSD used for TrueNAS...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1774)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-1783)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for virglrenderer (EulerOS-SA-2023-1749)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2023-1783)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack overflow was discovered in the TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of...

EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2023-1761)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack overflow was discovered in the TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1796)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2023-1733)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1736)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-1796)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. CVE-2023-0049 - Heap-based Buffer Overflow in GitHub repository vim/vim prior to...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-1774)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. CVE-2023-0049 - Heap-based Buffer Overflow in GitHub repository vim/vim prior to...

EulerOS Virtualization 3.0.2.0 : virglrenderer (EulerOS-SA-2023-1749)

According to the versions of the virglrenderer package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow in the vrendrenderertransferwriteiov function in vrendrenderer.c in virglrenderer through 0.8....

Updated imagemagick packages fix security vulnerability

A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of...

EulerOS Virtualization 3.0.2.0 : libjpeg-turbo (EulerOS-SA-2023-1733)

According to the versions of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a...

GLSA-202305-16 : Vim, gVim: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202305-16 Vim, gVim: Multiple Vulnerabilities - Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646. CVE-2022-1154 - heap buffer overflow in getonesourceline in GitHub repository vim/vim prior to 8.2.4647...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current netatalk Multiple Vulnerabilities (SSA:2023-121-01)

The version of netatalk installed on the remote host is prior to 3.1.12 / 3.1.15. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-121-01 advisory. - This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...