Adobe Media Encoder < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-63) (macOS)

The version of Adobe Media Encoder installed on the remote macOS host is prior to 23.6.2, 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-63 advisory. - Adobe Media Encoder version 24.0.2 and earlier and 23.6 and earlier are affected by an out-of-bounds...

Adobe Audition < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-64)

The version of Adobe Audition installed on the remote Windows host is prior to 23.6.2, 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-64 advisory. - Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an Access of Uninitialize...

Adobe Media Encoder < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-63)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 23.6.2, 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-63 advisory. - Adobe Media Encoder version 24.0.2 and earlier and 23.6 and earlier are affected by an out-of-bound...

Fedora 37 : radare2 (2023-f2a6d27239)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f2a6d27239 advisory. - cherrypick from upstream master patches for known vulnerabilities: - CVE-2023-4322 - heap-buffer-overflow in the brainfuck dissassembler -...

Fedora 38 : radare2 (2023-ffaebb1e10)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ffaebb1e10 advisory. - cherrypick from upstream master patches for known vulnerabilities: - CVE-2023-4322 - heap-buffer-overflow in the brainfuck dissassembler -...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-3198)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for cups (EulerOS-SA-2023-3203)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-3233)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated zlib packages fix a security vulnerability

The updated packages fix a security vulnerability: MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. CVE-2023-45853...

Heap overflow

Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...

CVE-2023-47359

Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...

Rocky Linux 8 : container-tools:1.0 (RLSA-2020:1360)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:1360 advisory. - tcpemu in tcpsubr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMUIRC. This can cause a heap-based...

Rocky Linux 8 : squid:4 (RLSA-2019:2593)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2019:2593 advisory. - An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decod...

Rocky Linux 9 : rsync (RLSA-2022:8291)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:8291 advisory. - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications...

CVE-2023-47359

Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...

RHEL 9 : wireshark (RHSA-2023:6469)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6469 advisory. The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security...

Fedora 39 : vim (2023-1976197889)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-1976197889 advisory. Security fix for CVE-2023-5535, CVE-2023-5441 ---- patchlevel 1984 ---- The newest upstream commit Tenable has extracted the preceding description...

Rocky Linux 8 : gd (RLSA-2020:4659)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:4659 advisory. - gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific functio...

Fedora 39 : indent (2023-845edc1181)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-845edc1181 advisory. This release fixes a heap buffer overwrite in searchbrace CVE-2023-40305 and a heap overread in lexi. Tenable has extracted the preceding descriptio...

ALSA-2023:6745 Important: curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: a heap-based buffer overflow in the SOCKS5 proxy handshake CVE-2023-38545 curl: cookie injection with none file...