Rockwell Automation FactoryTalk Linx

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/Low skill level to exploit Vendor: Rockwell Automation Equipment: FactoryTalk Linx Vulnerabilities: Improper Input Validation, Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could...

Debian DSA-4794-1 : mupdf - security update

A heap-based buffer overflow flaw was discovered in MuPDF, a lightweight PDF viewer, which may result in denial of service or the execution of arbitrary code if malformed documents are opened. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE Security Update : SDL (openSUSE-2020-1990)

This update for SDL fixes the following issues : Security issue fixed : - CVE-2019-13616: Fixed heap-based buffer over-read in BlitNtoN in video/SDLblitN.c when called from SDLSoftBlit bsc1141844. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc...

Denial Of Service (DoS)

raptor is vulnerable to denial of service DoS. The vulnerability exists through raptorxmlwriterstartelementcommon in raptorxmlwriter.c when it miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows...

Security update for SDL (moderate)

openSUSE Security Update: Security update for SDL Announcement ID: openSUSE-SU-2020:1990-1 Rating: moderate References: 1141844 Cross-References: CVE-2019-13616 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for SDL fixes th...

RHEL 7 : SDL (RHSA-2020:3868)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3868 advisory. Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio...

RHEL 7 : poppler and evince (RHSA-2020:1074)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1074 advisory. Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. The evince packages provide a simple...

RHEL 8 : expat (RHSA-2020:4484)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4484 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: large number of colons in input makes parser consume high amount of...

RHEL 8 : gd (RHSA-2020:4659)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4659 advisory. GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among...

[ASA-202011-20] raptor: arbitrary code execution

Arch Linux Security Advisory ASA-202011-20 ========================================== Severity: Medium Date : 2020-11-19 CVE-ID : CVE-2017-18926 CVE-2020-25713 Package : raptor Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1283 Summary ======= The package...

CVE-2020-6016

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNPReceiveUnreliableSegment, leading to a Heap-Based Buffer Underflow and a free of memory not from the heap, resulting in a memory corruption and probably even a remot...

CVE-2020-6016

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNPReceiveUnreliableSegment, leading to a Heap-Based Buffer Underflow and a free of memory not from the heap, resulting in a memory corruption and probably even a remot...

CVE-2020-6016

CVE-2020-6016 affects Valve’s Game Networking Sockets (GNS/Steam Sockets) prior to v1.2.0. The root cause is improper handling of unreliable segments with negative offsets in SNP_ReceiveUnreliableSegment(), causing a heap-based buffer underflow, memory corruption, and a probable remote code execu...

RHEL 8 : libvncserver (RHSA-2020:0920)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0920 advisory. LibVNCServer is a C library that enables you to implement VNC server functionality into own programs. Security Fixes: libvncserver:...

Amazon Linux AMI : libtiff (ALAS-2020-1447)

The version of libtiff installed on the remote host is prior to 4.0.3-35.36. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1447 advisory. TIFFCheckMalloc and TIFFCheckRealloc in tifaux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because th...

Amazon Linux AMI : qemu-kvm (ALAS-2020-1449)

The version of qemu-kvm installed on the remote host is prior to 1.5.3-156.24. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1449 advisory. qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service guest crash by leveraging...

Ubuntu 16.04 LTS / 18.04 LTS : SLiRP vulnerabilities (USN-4632-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4632-1 advisory. It was discovered that the SLiRP networking implementation of the QEMU emulator did not properly manage memory under certain circumstances. A...

Security update for SDL (moderate)

openSUSE Security Update: Security update for SDL Announcement ID: openSUSE-SU-2020:1916-1 Rating: moderate References: 1141844 Cross-References: CVE-2019-13616 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for SDL fixes th...

Ubuntu: Security Advisory (USN-4632-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4632-1: SLiRP vulnerabilities

It was discovered that the SLiRP networking implementation of the QEMU emulator did not properly manage memory under certain circumstances. An attacker could use this to cause a heap-based buffer overflow or other out- of-bounds access, which can lead to a denial of service application crash or...