14869 matches found
CVE-2020-27799
A heap-based buffer over-read was discovered in the accuagetbe32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file...
CVE-2020-27796
A heap-based buffer over-read was discovered in the invertptdynamic function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...
CVE-2020-27796
A heap-based buffer over-read was discovered in the invertptdynamic function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...
CVE-2022-2991
A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and...
CVE-2022-2991
A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and...
CVE-2022-2991
A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and...
SonicWall SMA100 Post-Auth Heap-based Buffer Overflow Vulnerability
A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of Service DoS on the appliance or potentially lead to code execution. This vulnerability impacts 10.2.1.5-34sv and earlier versions.IMPORTANT: SMA 1000 series...
SUSE SLES12: libp11-kit0 / libp11-kit0-32bit / p11-kit / p11-kit-32bit / etc (SUSE-SU-2022:2871-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2871-1 advisory. - CVE-2020-29362: Fixed a 4 byte overread that could lead to crashes bsc1180065 Tenable has extracted the preceding description block direct...
SUSE SLES15 Security Update : bluez (SUSE-SU-2022:2864-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2864-1 advisory. - CVE-2019-8922: Fixed a buffer overflow in the implementation of the Service Discovery Protocol bsc1193227. Tenable has extracted the...
CVE-2022-26061
A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2022-26061
A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2022-26061
CVE-2022-26061 describes a heap-based buffer overflow in the gif2h5 functionality of libhdf5 (HDF5 Group) up to version 1.10.4. A specially crafted GIF file can lead to code execution. Affected component: HDF5 libhdf5 1.10.4, function gif2h5. Root cause: heap overflow in GIF-to-HDF5 conversion pa...
CVE-2022-26061
A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2022-26061
A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
GLSA-202208-32 : Vim, gVim: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202208-32 Vim, gVim: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Vim and gVim. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...
SUSE SLES12: libz1 / libz1-32bit / zlib-devel / zlib-devel-32bit / etc (SUSE-SU-2022:2847-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2847-1 advisory. - CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field bsc1202175. Tenable has extracted t...
SUSE SLES12 Security Update : zlib (SUSE-SU-2022:2845-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:2845-1 advisory. - CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field bsc1202175. Tenable has extracted the precedin...
Heap-based Buffer Overflow
vim is vulnerable to heap-based buffer overflow. A malicious user is able to cause the application to crash due to a heap-based buffer overflow in function compilelockunlock in vim/src/vim9cmds.c...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : rsync vulnerability (USN-5573-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5573-1 advisory. Evgeny Legerov discovered that zlib incorrectly handled memory when performing certain inflate operations. An attacker could use this issu...