Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Sudo vulnerabilities (USN-4705-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4705-1 advisory. It was discovered that Sudo incorrectly handled memory when parsing command lines. A local attacker could possibly use this issue...

Oracle Linux 6 : sudo (ELSA-2021-9019)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9019 advisory. - Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via sudoedit -s and a command-line argument that ends with a singl...

Debian DLA-2534-1 : sudo security update

The Qualys Research Labs discovered a heap-based buffer overflow vulnerability in sudo, a program designed to provide limited super user privileges to specific users. Any local user sudoers and non-sudoers can exploit this flaw for root privilege escalation. For Debian 9 stretch, this problem has...

Fedora 33 : sudo (2021-2cb63d912a)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-2cb63d912a advisory. - Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via...

SUSE SLED15 / SLES15 Security Update : sudo (SUSE-SU-2021:0227-1)

This update for sudo fixes the following issues : A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges bsc1181090,CVE-2021-3156 It was possible for a user to test for the existence of a directory due to a Race Condition in sudoedit...

Debian DSA-4839-1 : sudo - security update

The Qualys Research Labs discovered a heap-based buffer overflow vulnerability in sudo, a program designed to provide limited super user privileges to specific users. Any local user sudoers and non-sudoers can exploit this flaw for root privilege escalation. %NASLMINLEVEL 70300 C Tenable Network...

Oracle Linux 8 : sudo (ELSA-2021-0218)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-0218 advisory. 1.8.29-6.1 - RHEL 8.3.Z ERRATUM - CVE-2021-3156 Resolves: rhbz1917732 Tenable has extracted the preceding description block directly from the Oracle Linux...

SUSE SLES12 Security Update : sudo (SUSE-SU-2021:0225-1)

This update for sudo fixes the following issues : A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges bsc1181090,CVE-2021-3156 It was possible for a user to test for the existence of a directory due to a Race Condition in sudoedit...

CVE-2021-3156

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character...

CVE-2021-3156

A flaw was found in sudo. A heap-based buffer overflow was found in the way sudo parses command line arguments. This flaw is exploitable by any local user who can execute the sudo command by default, any local user can execute sudo without authentication. Successful exploitation of this flaw coul...

CVE-2020-27297

The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values and remotely execute code on the OPC UA Tunneller versions prior to 6.3.0.8233...

CVE-2020-27297

The CVE-2020-27297 issue affects the OPC UA Tunneller (Matrikon, Honeywell) prior to version 6.3.0.8233. The vulnerability is a heap-based buffer overflow in the Tunneller component that can allow an attacker to manipulate memory and remotely execute code. Affected product versions are specifical...

CVE-2021-25900

An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insertmany...

CVE-2021-25900

An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insertmany...

CVE-2021-3156

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character...

Fuji Electric Tellus Lite V-Simulator and V-Server Lite

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Fuji Electric Equipment: Tellus Lite V-Simulator and V-Server Lite Vulnerabilities: Stack-based Buffer Overflow, Out-of-Bounds Read, Out-of-Bounds Write, Access of Uninitialized Pointer, Heap-based Buffer Overflow 2...

openSUSE Security Update : openexr (openSUSE-2020-2351)

This update for openexr fixes the following issues : Security issues fixed : - CVE-2020-16587: Fixed a heap-based buffer overflow in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp bsc1179879. - CVE-2020-16588: Fixed a NULL pointer deference in generatePreview bsc1179879. - CVE-2020-16589:...

openSUSE Security Update : openexr (openSUSE-2020-2349)

This update for openexr fixes the following issues : Security issues fixed : - CVE-2020-16587: Fixed a heap-based buffer overflow in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp bsc1179879. - CVE-2020-16588: Fixed a NULL pointer deference in generatePreview bsc1179879. - CVE-2020-16589:...

openSUSE Security Update : vlc (openSUSE-2021-76)

This update for vlc fixes the following issues : Update to 3.0.11.1 : - CVE-2020-13428: Fixed heap-based buffer overflow in the hxxxAnnexBtoxVC boo1172727 - CVE-2020-26664: Fixed heap-based buffer overflow in EbmlTypeDispatcher:send boo1180755 C Tenable Network Security, Inc. The descriptive text...

openSUSE Security Update : vlc (openSUSE-2021-91)

This update for vlc fixes the following issues : Update to 3.0.11.1 : - CVE-2020-13428: Fixed heap-based buffer overflow in the hxxxAnnexBtoxVC boo1172727 - CVE-2020-26664: Fixed heap-based buffer overflow in EbmlTypeDispatcher:send boo1180755 C Tenable Network Security, Inc. The descriptive text...