14869 matches found
SUSE SLES12 Security Update : indent (SUSE-SU-2023:3432-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3432-1 advisory. - CVE-2023-40305: Fixed a memory safety issues bug. bsc1214243 Tenable has extracted the preceding description block directly from the SUSE...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : elfutils vulnerabilities (USN-6322-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6322-1 advisory. It was discovered that elfutils incorrectly handled certain malformed files. If a user or automated system were tricked into...
CVE-2023-40889
A heap-based buffer overflow exists in the qrreadermatchcenters function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be...
CVE-2023-40889
CVE-2023-40889 (ZBar) involves a heap-based buffer overflow in the qr_reader_match_centers function of ZBar 0.23.90. A specially crafted QR code can trigger information disclosure and potentially arbitrary code execution when scanned. Exploit vectors in public advisories align with input via inpu...
CVE-2023-40889
A heap-based buffer overflow exists in the qrreadermatchcenters function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be...
CVE-2023-40889
A heap-based buffer overflow exists in the qrreadermatchcenters function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be...
CVE-2023-40745
LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service application crash or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...
CVE-2020-19190
A flaw was found in the ncurses library. This issue occurs when processing a crafted terminfo database, causing a heap-based buffer overflow, resulting in an application crash. Mitigation Do not compile or decompile untrusted terminfo descriptions...
CVE-2020-19189
A flaw was found in the ncurses library. This issue occurs when processing a crafted terminfo database, causing a heap-based buffer overflow, resulting in an application crash. Mitigation Do not compile or decompile untrusted terminfo descriptions...
Fedora 38 : ImageMagick (2023-27548af422)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-27548af422 advisory. Update ImageMagick to 7.1.1.15 2217558 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
CVE-2020-19726
A heap-based buffer overflow was found in binutils in the bfdgetl32 function, relating to the auxiliary symbol data. This flaw allows an attacker to read or write to system memory or cause a denial of service...
Amazon Linux 2 : libjpeg-turbo (ALAS-2023-2214)
The version of libjpeg-turbo installed on the remote host is prior to 2.0.90-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2214 advisory. The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a...
CVE-2021-46174
Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37...
CVE-2021-32420
dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...
CVE-2021-29390
libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...
CVE-2021-32420
dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...
CVE-2021-29390
libjpeg-turbo version 2.0.90 has a heap-based buffer over-read 2 bytes in decompresssmoothdata in jdcoefct.c...
CVE-2021-32420
dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y...
