NewStart CGSL MAIN 6.02 : binutils Multiple Vulnerabilities (NS-SA-2022-0087)

The remote NewStart CGSL host, running version MAIN 6.02, has binutils packages installed that are affected by multiple vulnerabilities: - An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2783)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101. CVE-2022-2571 - Undefined Behavior for Input to API in GitHub repository...

NewStart CGSL MAIN 6.02 : file Vulnerability (NS-SA-2022-0086)

The remote NewStart CGSL host, running version MAIN 6.02, has file packages installed that are affected by a vulnerability: - cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write...

EulerOS 2.0 SP9 : zlib (EulerOS-SA-2022-2787)

According to the versions of the zlib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only...

AlmaLinux 8 : rsync (ALSA-2022:7793)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7793 advisory. - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications tha...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2783)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:3959-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-3974

A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is the function AP4StdcFileByteStream::ReadPartial of the file Ap4StdCFileByteStream.cpp of the component mp4info. The manipulation leads to heap-based buffer overflow. The attack can be launched...

MGASA-2022-0423 Updated pixman packages fix security vulnerability

In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an integer overflow in pixmansamplefloory. CVE-2022-44638...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : busybox (SUSE-SU-2022:3959-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3959-1 advisory. - Enable switchroot With this change virtme --force-initramfs works as expected. - Enable udhcpc...

CVE-2022-3974

CVE-2022-3974 affects Axiomatic Bento4, specifically the ReadPartial function in Ap4StdCFileByteStream.cpp (mp4info). The issue is a heap-based buffer overflow that can be exploited remotely. Public exploit information is available and the vulnerability is tracked as VDB-213553. Connected sources...

SUSE SLES15 Security Update : sudo (SUSE-SU-2022:3938-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3938-1 advisory. - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt...

Heap overflow

Netatalk through 3.1.13 has an afpgetappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD used for TrueNAS...

Debian DSA-5276-1 : pixman - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5276 advisory. Maddie Stone reported a heap-based buffer overflow flaw in pixman, a pixel-manipulation library for X and cairo, which could result in denial of service or potentially the...

OPENSUSE-SU-2022:10196-1 Security update for libmodbus

This update for libmodbus fixes the following issues: - CVE-2022-0367: Fixed heap-based Buffer Overflow in modbusreply boo1195124...

Security update for libmodbus (important)

openSUSE Security Update: Security update for libmodbus Announcement ID: openSUSE-SU-2022:10196-1 Rating: important References: 1195124 Cross-References: CVE-2022-0367 CVSS scores: CVE-2022-0367 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP...

Debian dla-3182 : vim - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3182 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3182-1 [email protected]...

Oracle Linux 6 : zlib (ELSA-2022-9988)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9988 advisory. 1.2.3-29.0.3 - Fix for CVE-2022-37474 Orabug: 34759428 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

CentOS 8 : yajl (CESA-2022:7524)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7524 advisory. - yajl: heap-based buffer overflow when handling large inputs due to an integer overflow CVE-2022-24795 Note that Nessus has not tested for this issue but has...

Oracle Linux 7 : zlib (ELSA-2022-9987)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9987 advisory. 1.2.7-20.0.1 - Resolves: CVE-2022-37434 Orabug: 34752508 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...