Google Chrome < 116.0.5845.96 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 116.0.5845.96. It is, therefore, affected by multiple vulnerabilities as referenced in the 202308stable-channel-update-for-desktop15 advisory. - Insufficient policy enforcement in Extensions API in Google Chrome prior to...

PT-2023-35955 · Git +1 · Ntopng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the IEC104Stats::processPacket function, which is calle...

Google Chrome < 116.0.5845.96 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 116.0.5845.96. It is, therefore, affected by multiple vulnerabilities as referenced in the 202308stable-channel-update-for-desktop15 advisory. - Insufficient policy enforcement in Extensions API in Google Chrome prior t...

UBUNTU-CVE-2023-40305

GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...

Denial Of Service (DoS)

libpodofo.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap buffer overflow in the readXRefStreamEntry functionality used in the parseStream function of PdfXRefStreamParserObject.cpp, allowing an attacker to cause an application crash...

Amazon Linux AMI : cups (ALAS-2023-1796)

The version of cups installed on the remote host is prior to 1.4.2-67.23. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1796 advisory. OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow ...

Amazon Linux 2 : cups (ALAS-2023-2184)

The version of cups installed on the remote host is prior to 1.6.3-51. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2184 advisory. OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a...

Amazon Linux AMI : GraphicsMagick (ALAS-2023-1799)

The version of GraphicsMagick installed on the remote host is prior to 1.3.32-1.17. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1799 advisory. In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. CVE-2022-1270 Tenable has extracted the preceding...

PT-2023-27362 · Libboron +1 · Libboron +1

Name of the Vulnerable Software and Affected Versions: Boron version 2.0.8 Description: The issue is a heap-based buffer overflow in the ur parseBlockI function at i parse blk.c. This overflow can occur in the libboron component of Boron. Recommendations: For Boron version 2.0.8, consider disabli...

Adobe Dimension Heap Buffer Overflow Vulnerability (CNVD-2023-65166)

Adobe Dimension is a 3D design tool that is very easy for designers to use while providing high quality visuals. To create realistic objects, Adobe Dimension uses materials defined in the NVidia Material Design Language. A heap buffer overflow vulnerability exists in Adobe Dimension. The...

Fedora 38 : OpenImageIO (2023-ad5fee9a64)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ad5fee9a64 advisory. Changes since 2.4.12: https://github.com/OpenImageIO/oiio/releases/tag/v2.4.13.0 https://github.com/OpenImageIO/oiio/releases/tag/v2.4.14.0 Security...

USN-6229-1: LibTIFF vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that LibTIFF was not properly handling variables used to perform memory management operations when processing an image through tiffcrop, which could lead to a heap...

OSV-2023-674 Heap-buffer-overflow in get_grouplength

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61269 Crash type: Heap-buffer-overflow WRITE 4 Crash state: getgrouplength getbranchlength getgrouplength...

OSV-2023-673 Heap-buffer-overflow in match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61268 Crash type: Heap-buffer-overflow READ 1 Crash state: match pcre2match8 pcre2fuzzsupport.c...

PT-2023-35942 · Pcre2 · Pcre2

Name of the Vulnerable Software and Affected Versions: PCRE2 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the pcre2 match 8 function, as indicated by the crash state. This issue is related to a crash type of...

Adobe Dimension 安全漏洞

Adobe Dimension is a 3D design tool that is very easy for designers to use while providing high quality visuals. To create realistic objects, Adobe Dimension uses materials defined in the NVidia Material Design Language. A heap buffer overflow vulnerability exists in Adobe Dimension. The...

Important: GraphicsMagick

Issue Overview: In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. CVE-2022-1270 Affected Packages: GraphicsMagick Issue Correction: Run yum update GraphicsMagick or yum update --advisory ALAS-2023-1799 to update your system. New Packages: i686: ...

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2023-2607)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : glib2 (EulerOS-SA-2023-2612)

According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : It was discovered that GLib incorrectly handled non-normal GVariants. An attacker could use this issue to cause GLib to crash, resulting in a denial...

Medium: cups

Issue Overview: OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service DoS attack. A buffer overflow vulnerability in the function formatlogline could allow remote attackers...