14869 matches found
Amazon Linux 2022 : ncurses (ALAS2022-2022-217)
The version of ncurses installed on the remote host is prior to 6.2-4.20200222. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-217 advisory. - An issue was discovered in ncurses through v6.2-1. nccaptoinfo in captoinfo.c has a heap-based buffer overflow...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2810)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Security Vulnerability found in zlib fixed in the zlib version shipped with IBM Security Verify for Gateway (RADIUS & WinLogin) and for Bridge (DirSync)
Summary The security vulnerabilityheap-based buffer overflow found in zlib was fixed in the following products: IBM Security Verify Gateway for RADIUS v1.0.8, IBM Security Verify Gateway for Windows Login v1.0.9 and IBM Security Verify Bridge for Directory Sync v1.0.10 Vulnerability Details...
SUSE-SU-2022:4360-1 Security update for netatalk
This update for netatalk fixes the following issues: - CVE-2022-45188: Fixed heap-based buffer overflow in afpgetappl bsc1205393...
EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-2810)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. CVE-2022-2125 - NULL Pointer Dereference in GitHub repository vim/vim prior t...
Ubuntu 16.04 ESM : protobuf vulnerabilities (USN-5769-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5769-1 advisory. It was discovered that protobuf did not properly manage memory when serializing large messages. An attacker could possibly use this issue to cause...
openSUSE 15 Security Update : matio (openSUSE-SU-2022:10235-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10235-1 advisory. - matio aka MAT File I/O Library 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble called from ReadInt32Data a...
CVE-2022-2948
GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code...
CVE-2022-2948 GE CIMPLICITY Heap-based Buffer Overflow
GE CIMPICITY versions 2022 and prior is vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code...
[SECURITY] [DLA 3232-1] virglrenderer security update
Debian LTS Advisory DLA-3232-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost December 07, 2022 https://wiki.debian.org/LTS Package : virglrenderer Version : 0.7.0-2+deb10u1 CVE ID : CVE-2019-18388 CVE-2019-18389 CVE-2019-18390 CVE-2019-18391 CVE-2020-8002...
PT-2022-19644 · Ge · Ge Cimpicity
Name of the Vulnerable Software and Affected Versions: GE CIMPICITY versions 2022 and prior Description: The issue is a heap-based buffer overflow that could allow an attacker to execute arbitrary code. Recommendations: For GE CIMPICITY versions 2022 and prior, at the moment, there is no...
Amazon Linux 2 : ncurses (ALAS-2022-1893)
The version of ncurses installed on the remote host is prior to 6.0-8.20170212. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1893 advisory. The ncurses package tic is susceptible to a heap overflow on crafted input. When the terminfo entry- description...
Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-008)
The version of kernel installed on the remote host is prior to 5.10.82-83.359. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-008 advisory. A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose handler could...
Amazon Linux 2 : vim (ALAS-2022-1902)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1902 advisory. 2024-02-01: CVE-2022-3591 was added to this advisory. 2024-02-01: CVE-2022-3520 was added to this advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. CVE-2022-352...
Updated imagemagick packages fix security vulnerability
A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks. CVE-2021-3574 A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows a...
Medium: zlib
Issue Overview: A security vulnerability was found in zlib. The flaw triggered a heap-based buffer in inflate in the inflate.c function via a large gzip header extra field. This flaw is only applicable in the call inflateGetHeader. CVE-2022-37434 Affected Packages: zlib Issue Correction: Run yum...
Ubuntu 22.04 LTS : LibBPF vulnerabilities (USN-5759-1)
The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5759-1 advisory. It was discovered that LibBPF incorrectly handled certain memory operations under certain circumstances. An attacker could possibly use this issue to cau...
Debian dla-3223 : giflib-tools - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3223 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3223-1 [email protected]...
