CBL Mariner 2.0 Security Update: sqlite (CVE-2023-7104)

The version of sqlite installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-7104 advisory. - A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the...

SUSE SLES12: kernel-azure / kernel-azure-base / kernel-azure-devel / etc (SUSE-SU-2024:0113-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0113-1 advisory. The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs wer...

AlmaLinux 8 : sqlite (ALSA-2024:0253)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:0253 advisory. - A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2024:0120-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0120-1 advisory. The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixe...

EulerOS Virtualization 2.11.0 : lua (EulerOS-SA-2023-2763)

According to the versions of the lua package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read. CVE-2021-45985 Note that Tenab...

EulerOS Virtualization 2.10.0 : cups (EulerOS-SA-2023-3464)

According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to ...

EulerOS Virtualization 2.11.0 : binutils (EulerOS-SA-2023-2748)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Field thebfd of asymbol is uninitialized in function bfdmachogetsyntheticsymtab.CVE-2023-25588 Field filetable of struct module...

EulerOS Virtualization 2.9.0 : zlib (EulerOS-SA-2024-1025)

According to the versions of the zlib package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long...

EulerOS 2.0 SP10 : binutils (EulerOS-SA-2024-1078)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Binutils. The use of an uninitialized field in the struct module module may lead to application crash and local denial of...

EulerOS Virtualization 2.9.0 : cups (EulerOS-SA-2024-1004)

According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to ...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-3260)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 - Integer Overflow or Wraparound in GitHub repository vim/vim prior to...

EulerOS 2.0 SP11 : freetype (EulerOS-SA-2023-2858)

According to the versions of the freetype package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow. CVE-2022-31782 Note that Tenable Network Security has...

EulerOS 2.0 SP11 : lua (EulerOS-SA-2023-2655)

According to the versions of the lua package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read. CVE-2021-45985 Note that Tenable Network...

EulerOS 2.0 SP11 : binutils (EulerOS-SA-2023-3264)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename,...

EulerOS 2.0 SP11 : freetype (EulerOS-SA-2023-2841)

According to the versions of the freetype package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow. CVE-2022-31782 Note that Tenable Network Security has...

EulerOS 2.0 SP11 : cups (EulerOS-SA-2023-3266)

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based...

EulerOS 2.0 SP11 : binutils (EulerOS-SA-2023-3001)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangletype in rust-demangle.c...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-3288)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 - Integer Overflow or Wraparound in GitHub repository vim/vim prior to...

EulerOS 2.0 SP11 : binutils (EulerOS-SA-2023-3024)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangletype in rust-demangle.c...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-3233)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 - Integer Overflow or Wraparound in GitHub repository vim/vim prior to...