Debian DLA-2804-1 : libsdl1.2 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2804 advisory. Several vulnerability have been fixed in libsdl2, the older version of the Simple DirectMedia Layer library that provides low level access to audio, keyboard, mous...

Debian DLA-2803-1 : libsdl2 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2803 advisory. - An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulti...

CVE-2021-3903

vim is vulnerable to Heap-based Buffer Overflow Mitigation Do not run untrusted vim scripts with -s scriptin as it is never safe to do so...

Updated ffmpeg packages fix security vulnerability

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote malicious user to cause a Denial of Service. CVE-2020-20446 FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service...

CVE-2021-3756

libmysofa is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3756

libmysofa is vulnerable to Heap-based Buffer Overflow...

Heap overflow

libmysofa is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3756

CVE-2021-3756 affects the libmysofa library (as referenced across connected documents, including NVD and related advisories). The available details confirm a heap-based buffer overflow vulnerability in libmysofa. The connected sources do not specify affected versions, root cause specifics beyond ...

Debian DLA-2796-1 : jbig2dec - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2796 advisory. Two issues have been found in jbig2dec, a JBIG2 decoder library. One issue is related to an overflow with a crafted image file. The other is related to a NULL...

CVE-2021-22465

A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable...

CVE-2021-22465

The CVE-2021-22465 entry relates to a heap-based buffer overflow in a HarmonyOS component. Impact described as local attackers potentially causing kernel system unavailability. Connected sources (including Red Hat and CNVD variants) consistently identify the same issue without additional technica...

NewStart CGSL CORE 5.05 / MAIN 5.05 : audiofile Multiple Vulnerabilities (NS-SA-2021-0171)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has audiofile packages installed that are affected by multiple vulnerabilities: - The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an...

CVE-2021-3903

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3903

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3903

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3903

CVE-2021-3903 is a heap-based memory access vulnerability in vim. Multiple connected advisories confirm a memory access/heap overflow issue in vim that can crash or potentially be exploited when scrolling or handling certain inputs. Affected packages include vim and related vim-* components acros...

CVE-2021-3903 Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3903

vim is vulnerable to Heap-based Buffer Overflow...

NewStart CGSL CORE 5.05 / MAIN 5.05 : sudo Vulnerability (NS-SA-2021-0178)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has sudo packages installed that are affected by a vulnerability: - Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via sudoedit -s and...

NewStart CGSL CORE 5.05 / MAIN 5.05 : grub2 Multiple Vulnerabilities (NS-SA-2021-0139)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has grub2 packages installed that are affected by multiple vulnerabilities: - A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process. This flaw...