EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-1579)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. CVE-2022-3520 - Heap based buffer overflow in vim/vim 9.0.0946 and below...

CVE-2021-43316

CVE-2021-43316 affects UPX, where a heap-based buffer overflow occurs in the get_le64() function when processing a pointer p to an inaccessible address. The vulnerability impacts availability (per CVSS: HIGH) with no confidentiality/integrity impact, and is linked to UPX ELF packing paths. Public...

CVE-2021-43314

CVE-2021-43314 describes a heap-based buffer overflow in UPX, triggered in PackLinuxElf32::elf_lookup() via an inaccessible address addressed by the generic pointer p in get_le32() (p_lx_elf.cpp:5368). The issue is under UPX ELF32 parsing and, per connected advisories, was addressed by updating U...

CVE-2021-43313

UPX is affected by CVE-2021-43313: a heap-based buffer overflow in PackLinuxElf32::invert_pt_dynamic (p_lx_elf.cpp:1688) when processing ELF inputs. Several connected sources confirm the issue and reference the same function/path. The OSV/OpenSUSE advisory indicates this CVE was addressed in the ...

CVE-2021-43311

A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5382...

CVE-2021-43311

CVE-2021-43311 : A heap-based buffer overflow was discovered in UPX, triggered in PackLinuxElf32::elf_lookup() via a pointer in get_le32() (p_lx_elf.cpp:5382). Public coverage across OSV/NVD confirms the issue in UPX, affecting Linux ELF packing paths. The vulnerability description specifies a he...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1589)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : gif2apng vulnerabilities (USN-5969-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5969-1 advisory. It was discovered that gif2apng contained multiple heap-base overflows. An attacker could potentially exploit this to cause a...

Heap overflow

A vulnerability, which was classified as problematic, has been found in syoyo tinydng. Affected by this issue is the function interceptormemcpy of the file tinydngloader.h. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been...

CVE-2023-27857 Rockwell Automation ThinManager ThinServer Heap-Based Buffer Overflow

In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to crash ThinServer.exe due to a...

CVE-2023-27857 Rockwell Automation ThinManager ThinServer Heap-Based Buffer Overflow

In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to crash ThinServer.exe due to a...

Amazon Linux 2 : openjpeg (ALAS-2023-1999)

The version of openjpeg installed on the remote host is prior to 1.5.1-19. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-1999 advisory. A heap-based buffer overflow was found in OpenJPEG. This flaw allows an attacker to execute arbitrary code with the permissions o...

Important: vim

Issue Overview: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483. CVE-2022-3234 Use After Free in GitHub repository vim/vim prior to 9.0.0490. CVE-2022-3235 Use After Free in GitHub repository vim/vim prior to 9.0.0530. CVE-2022-3256 NULL Pointer Dereference in GitHub...

Amazon Linux AMI : vim (ALAS-2023-1703)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1703 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. CVE-2023-0288 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. CVE-2023-0433 Divide By Zero in...

SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2023:0852-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0852-1 advisory. The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: -...

Medium: openjpeg

Issue Overview: A heap-based buffer overflow was found in OpenJPEG. This flaw allows an attacker to execute arbitrary code with the permissions of the application compiled against OpenJPEG. CVE-2021-3575 Affected Packages: openjpeg Note: This advisory is applicable to Amazon Linux 2 AL2 Core...

Amazon Linux 2023 : krb5-devel, krb5-libs, krb5-pkinit (ALAS2023-2023-103)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-103 advisory. Integer overflow vulnerabilities in PAC parsing CVE-2022-42898 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has not tested f...

Amazon Linux 2023 : ncurses, ncurses-base, ncurses-c++-libs (ALAS2023-2023-023)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-023 advisory. The ncurses package tic is susceptible to a heap overflow on crafted input. When the terminfo entry- description compiler processes input, proper bounds checking was not enforced leading to thi...

Amazon Linux 2023 : giflib, giflib-devel, giflib-utils (ALAS2023-2023-075)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-075 advisory. An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over- read. CVE-2020-23922 There is a heap-buffer-overflow in GIFLIB 5.2.1 function...

Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2023-117)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-117 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483. CVE-2022-3234 Use After Free in GitHub repository vim/vim prior to 9.0.0490. CVE-2022-3235 Use After Free in GitHub...