Denial Of Service (DoS)

libsolv.so is vulnerable to denial of service DoS attacks. A remote attacker is able to cause heap-based buffer overflow in resolveweak function in src/solver.c resulting in a system crash...

Denial Of Service (DoS)

libsolv.so is vulnerable to denial of serviceDoS attacks. A remote attacker is able to cause heap-based buffer overflow in makeruledecisions function in src/solver.c resulting in a system crash...

CVE-2022-0676 Heap-based Buffer Overflow in radareorg/radare2

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4...

CVE-2022-0714 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436...

Denial Of Service (DoS)

mruby vulnerable to denial of service. An attacker can crash the application through the heap-based buffer overflow in the mrbfsend function of vm.c...

Amazon Linux 2 : vim (ALAS-2022-1751)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1751 advisory. It was found that vim was vulnerable to use-after-free flaw in the way it was treating allocated lines in user functions. A specially crafted file could crash the vim process or possibly lead to...

Amazon Linux AMI : vim (ALAS-2022-1567)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1567 advisory. 2024-02-14: CVE-2021-3778 was added to this advisory. 2024-02-14: CVE-2021-3875 was added to this advisory. 2024-02-14: CVE-2021-3872 was added to this advisory. A flaw was found in vim. A possibl...

CVE-2021-46653

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-46603

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46603 due to a heap-based buffer overflow in the J2K image parser. The vulnerability arises from inadequate validation of the length of user-supplied data before copying it into a heap buffer, allowing remote attackers to execute arb...

CVE-2022-0631 Heap-based Buffer Overflow in mruby/mruby

Heap-based Buffer Overflow in Homebrew mruby prior to 3.2...

CVE-2022-0631 Heap-based Buffer Overflow in mruby/mruby

Heap-based Buffer Overflow in Homebrew mruby prior to 3.2...

Heap-based Buffer Overflow

Description There is a heap corruption when r2 processes a crafted dyldcache file. Confirmed on the latest release 5.6.2 and the master branch. Proof of Concept bash printf "%s"...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-5267-3)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5267-3 advisory. USN-5267-1 fixed vulnerabilities in the Linux kernel. This update provides the corresponding updates for the Linux kernel for Raspberry Pi...

Security update for tiff (important)

openSUSE Security Update: Security update for tiff Announcement ID: openSUSE-SU-2022:0480-1 Rating: important References: 1071031 1154365 1182808 1182809 1182811 1182812 1190312 1194539 Cross-References: CVE-2017-17095 CVE-2019-17546 CVE-2020-19131 CVE-2020-35521 CVE-2020-35522 CVE-2020-35523...

CVE-2021-21958

CVE-2021-21958 is a confirmed heap-based buffer overflow affecting Hancom Office 2020 11.0.0.2353, specifically in the HwordApp.dll. The TALOS writeup documents that the vulnerability arises when processing a specially crafted file, leading to memory corruption and potential arbitrary code execut...

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of...

Apple macOS ImageIO PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2022-9147)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9147 advisory. - cgroup-v1: Require capabilities to set releaseagent Eric W. Biederman Orabug: 33832582 CVE-2022-0492 - tee: handle lookup of shm with reference...

Oracle Linux 7 : aide (ELSA-2022-0473)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-0473 advisory. 0.15.1-13.0.1 - Fix sha256 and sha512 output length Orabug: 30820565 0.15.1.1 - backported fix for CVE-2021-45417 resolves: rhbz2041952 Tenable has extracted th...

RHEL 8 : Red Hat Virtualization Host security update [ovirt-4.4.10-1] (Important) (RHSA-2022:0540)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0540 advisory. The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host,...