14869 matches found
Debian dla-3675 : libbarcode-zbar-perl - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3675 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3675-1 [email protected]...
Debian dla-3682 : lib32ncurses-dev - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3682 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3682-1 [email protected]...
SUSE SLES15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2023:4634-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4634-1 advisory. Security issues: - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. bsc1215939 - CVE-2020-21679: Fixed a buffer overflow...
[SECURITY] [DLA 3675-1] zbar security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3675-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 30, 2023 https://wiki.debian.org/LTS -...
Debian dla-3679 : libvlc-bin - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3679 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3679-1 [email protected]...
Integer Overflow
gst-plugins-good is vulnerable to Integer Overflow. The vulnerability allows code execution with the privileges of the vulnerable application resulting in a potential denial-of-service DoS or a heap-based buffer overflow...
PTC KEPServerEx
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION : Exploitable remotely/low attack complexity Vendor : PTC Equipment : KEPServerEX, ThingWorx, OPC-Aggregator Vulnerabilities : Heap-based Buffer Overflow, Improper Validation of Certificate with Host Mismatch 2. RISK EVALUATION Successful...
Heap-based Buffer Overflow
wireshark is vulnerable to Heap-based Buffer Overflow. The vulnerability is caused due to a component NetScreen file parser which could crash. An attacker can crash Wireshark by injecting a malformed packet onto the wire or making a user to read a malformed packet trace file...
Heap-Based Buffer Overflow
capnproto:sid is vulnerable to Heap based buffer overflow. The vulnerability due to misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325 and WebSocket compression enabled, a malicious peer may be able to cause a buffer under run on a heap-allocated buffer.It leads to allow an...
Debian dla-3670 : libminizip-dev - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3670 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3670-1 [email protected] https://www.debian.org/lts/security/...
[SECURITY] [DLA 3670-1] minizip security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3670-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 28, 2023 https://wiki.debian.org/LTS -...
Denial Of Service (DoS)
libOpenImageIO.so is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to a heap-based buffer overflow in gifinput.cpp which allows an attacker to cause an application crash...
GLSA-202311-07 : AIDE: Root Privilege Escalation
The remote host is affected by the vulnerability described in GLSA-202311-07 AIDE: Root Privilege Escalation - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based buffer overflow...
Debian DSA-5567-1 : tiff - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5567 advisory. - A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a...
SUSE SLES12 Security Update : poppler (SUSE-SU-2023:4546-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4546-1 advisory. - CVE-2019-9545: Fixed a potential crash due to uncontrolled recursion in the JBIG parser bsc1128114. - CVE-2019-9631: Fixed an out...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2023:4557-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4557-1 advisory. Updated to version 9.0 with patch level 2103, fixes the following security problems CVE-2023-534...
CVE-2022-44010
An issue was discovered in ClickHouse before 22.9.1.2603. An attacker could send a crafted HTTP request to the HTTP Endpoint usually listening on port 8123 by default, causing a heap-based buffer overflow that crashes the process. This does not require authentication. The fixed versions are...
CVE-2023-41140
A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
CVE-2023-41140
CVE-2023-41140 concerns Autodesk AutoCAD 2023 and 2024, where parsing a malicious PRT file can trigger a heap-based buffer overflow in the parsing code. Affected component: PRT file parsing in AutoCAD. Underlying impact: crash, data leakage, or arbitrary code execution in the current process. Exp...
