CVE-2022-0367

CVE-2022-0367 affects libmodbus; a heap-based buffer overflow was found in modbus_reply() (src/modbus.c). Public advisories and multiple Debian/openSUSE/Nessus entries confirm this vulnerability and have issued security updates to libmodbus packages (e.g., Debian 3.1.4-2+deb10u2, 3.1.6-2+deb11u1;...

CVE-2022-0367

A heap-based buffer overflow flaw was found in libmodbus in function modbusreply in src/modbus.c...

CVE-2022-0284

A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format TIFF image to convert it into a PICON file format. This issue can potentially lead to a...

CVE-2022-0284

A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format TIFF image to convert it into a PICON file format. This issue can potentially lead to a...

CVE-2022-0284

A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format TIFF image to convert it into a PICON file format. This issue can potentially lead to a...

Debian dla-3084 : libndpi-bin - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3084 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3084-1 [email protected]...

Debian dla-3082 : exim4 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3082 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3082-1 [email protected] https://www.debian.org/lts/security/...

CVE-2022-2915

A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service DoS on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions...

CVE-2022-2915

CVE-2022-2915 is a heap-based buffer overflow in SonicWall SMA100 firmware that affects 10.2.1.5-34sv and earlier. An authenticated remote attacker can cause DoS and potentially code execution. Remediation: upgrade to SMA100 10.2.1.6-37sv or later as noted by SonicWall advisories; exploitation st...

Debian DSA-5218-1 : zlib - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5218 advisory. Evgeny Legerov reported a heap-based buffer overflow vulnerability in the inflate operation in zlib, which could result in denial of service or potentially the execution o...

Ubuntu: Security Advisory (USN-849-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-853-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : bluez (SUSE-SU-2022:2900-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2900-1 advisory. - CVE-2019-8922: Fixed a buffer overflow in the implementation of the Service Discovery Protocol bsc1193227. Tenable ha...

CVE-2020-27796

A heap-based buffer over-read was discovered in the invertptdynamic function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27801

A heap-based buffer over-read was discovered in the getle64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27800

A heap-based buffer over-read was discovered in the getle32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27801

A heap-based buffer over-read was discovered in the getle64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27800

CVE-2020-27800 affects UPX 4.0.0, with a heap-based buffer over-read in the get_le32 function of bele.h that can be triggered by a crafted Mach-O file. Multiple connected sources (NVD/NVL, OSV entries, Debian/Ubuntu/Alpine advisories, and Nessus plugin references) confirm the same root cause and ...

CVE-2020-27800

A heap-based buffer over-read was discovered in the getle32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27799

CVE-2020-27799 describes a heap-based buffer over-read in UPX 4.0.0, triggered by a crafted Mach-O file. The vulnerable component is acc_ua_get_be32 in miniacc.h. The CVE’s metrics indicate a high-severity, local, user-interaction-required flaw with a base score of 7.8. The provided connected doc...