Moderate: Red Hat Security Advisory: tar security update

An update for tar is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

SUSE SLES12 Security Update : clamav (SUSE-SU-2023:0453-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0453-1 advisory. - CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser bsc1208363. - CVE-2023-20052: Fixed ...

Moderate: tar security update

The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fixes: tar: heap buffer overflow at fromheader in list.c via specially crafted checksum CVE-2022-48303 For more details about the security issues, including the impact, a CVSS score,...

FreeBSD : libde256 -- multiple vulnerabilities (421c0af9-b206-11ed-9fe5-f4a47516fb57)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 421c0af9-b206-11ed-9fe5-f4a47516fb57 advisory. - libde265 v1.0.4 contains a heap buffer overflow in the putepelhvfallback function, which can...

PT-2023-36035 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details about the crash include the LibRaw buffer datastream::scanf one function, LibRaw::parse mos, and LibRaw::parse tiff ifd...

ALSA-2023:0842 Moderate: tar security update

The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fixes: tar: heap buffer overflow at fromheader in list.c via specially crafted checksum CVE-2022-48303 For more details about the security issues, including the impact, a CVSS score,...

Denial Of Service (DoS)

libtiff.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to a heap-buffer-overflow in extractContigSamplesShifted24bits of tiffcrop.c, allowing an attacker to cause an application crash through a maliciously crafted tiff file...

OSV-2023-80 Heap-buffer-overflow in set_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56037 Crash type: Heap-buffer-overflow READ Crash state: setdata refpkt gitpktparseline...

OSV-2023-78 Heap-buffer-overflow in ucl_object_dtor_unref_single

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56054 Crash type: Heap-buffer-overflow READ 8 Crash state: uclobjectdtorunrefsingle uclobjectdtorunref uclhashdestroy...

OSV-2023-79 Heap-buffer-overflow in H5O__fsinfo_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56076 Crash type: Heap-buffer-overflow READ 1 Crash state: H5Ofsinfodecode H5Omsgiteratereal H5Omsgremovereal...

OSV-2023-77 Heap-buffer-overflow in H5C__load_cache_image

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56075 Crash type: Heap-buffer-overflow READ 4 Crash state: H5Cloadcacheimage H5Cprotect H5ACprotect...

OSV-2023-75 Heap-buffer-overflow in isvcd_interlyr_motion_mode_pred_dyadic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56050 Crash type: Heap-buffer-overflow READ 1 Crash state: isvcdinterlyrmotionmodepreddyadic isvcdmvpredreftfrnby2epmb isvcdparseinterslicedatacabacenhlyr...

OSV-2023-72 Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56057 Crash type: Heap-buffer-overflow WRITE 4 Crash state: perfetto::traceprocessor::TrackEventParser::ParseTrackDescriptor perfetto::traceprocessor::TrackEventModule::ParseTracePacketData...

Denial Of Service (DoS)

clamav is vulnerable to denial of service DoS. A missing buffer size check results in a heap buffer overflow write, an attacker could submit a crafted HFS+ partition file allowing them to execute arbitrary code resulting in a system crash...

PT-2023-35987 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the function names H5C load cache image, H5C protect, and H5AC protect. Recommendations: At...

PT-2023-35978 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves several functions, including isvcd interlyr motion mode pred dyadic, isvcd mv...

PT-2023-35992 · Git +1 · Libucl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include a crash state involving ucl object dtor unref single, ucl object dto...

PT-2023-35998 · Git +1 · Libgit2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap buffer overflow read. Technical details include a crash type of Heap-buffer-overflow READ and a crash state involving...

PT-2023-35963 · Perfetto · Perfetto

Name of the Vulnerable Software and Affected Versions: perfetto affected versions not specified Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the perfetto::trace processor::TrackEventParser::ParseTrackDescriptor function, the...

OSV-2023-68 Heap-buffer-overflow in isvcd_residual_samp_mb_dyadic

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56023 Crash type: Heap-buffer-overflow READ 2 Crash state: isvcdresidualsampmbdyadic isvcdprocessresidualresamplemb isvcdprocessintermbrsdpredtargetlyr...