CVE-2021-3973 Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3973

vim is vulnerable to Heap-based Buffer Overflow...

Oracle Linux 8 : ncurses (ELSA-2021-4426)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4426 advisory. - fix buffer overflow in terminfo entry hashtable CVE-2019-17594 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : binutils (ELSA-2021-4364)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4364 advisory. 2.30-108.0.2 - Forward-port the following update: 2.30-93.0.4 - Backport fix for fencepost bug in CTF pptrtab usage causing coredumps - Backport test...

Oracle Linux 8 : jasper (ELSA-2021-4235)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4235 advisory. - Fix CVE-2021-26927 1933860 - Fix CVE-2021-26926 1922316 - Fix CVE-2021-3272 1922283 Tenable has extracted the preceding description block directly fr...

Oracle Linux 8 : gcc (ELSA-2021-4386)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4386 advisory. - CVE-2018-12207 / Intel SKX102 OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 8 : vim (ELSA-2021-4517)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4517 advisory. - 2004974 - CVE-2021-3796 vim: use-after-free in nvreplace in normal.c rhel-8.5.0 Tenable has extracted the preceding description block directly from t...

Oracle Linux 8 : compat-exiv2-026 (ELSA-2021-4319)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-4319 advisory. 0.26-6 - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure Resolves: bz1993283 - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header...

file security update

5.33-20 - rebuild 1954434 5.33-18 - fix heap-based buffer overflow in cdfreadpropertyinfo CVE-2019-18218 5.33-17 - improve magic for script recognition and other changes 1903531...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Vim vulnerabilities (USN-5147-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5147-1 advisory. It was discovered that Vim incorrectly handled permissions on the .swp file. A local attacker could possibly use this issue to...

Buffer Overflow

There is a heap-based buffer over-read in the fmtentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...

Oracle Linux 8 : virt:ol / and / virt-devel:rhel (ELSA-2021-1762)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1762 advisory. - Resolves: bz1917451 CVE-2020-29443 virt:rhel/qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands rhel-8.4.0 - Resolves: bz1919111...

RHEL 8 : file (RHSA-2021:4374)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4374 advisory. The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types,...

CentOS 8 : file (CESA-2021:4374)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4374 advisory. - file: heap-based buffer overflow in cdfreadpropertyinfo in cdf.c CVE-2019-18218 Note that Nessus has not tested for this issue but has instead relied only on...

RHEL 8 : libsolv (RHSA-2021:4408)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4408 advisory. The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: heap-based buffe...

CentOS 8 : libsepol (CESA-2021:4513)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4513 advisory. - libsepol: use-after-free in cilverifyclassperms CVE-2021-36084, CVE-2021-36085 - libsepol: use-after-free in cilresetclasspermission CVE-2021-36086 -...

CentOS 8 : exiv2 (CESA-2021:4173)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4173 advisory. - exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata CVE-2021-29457 - exiv2: Out-of-bounds read in Exiv2::Internal::CrwMap::encode...

RHEL 8 : binutils (RHSA-2021:4364)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4364 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includ...

CentOS 8 : jasper (CESA-2021:4235)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4235 advisory. - jasper: Heap-based buffer overflow in cpcreate in jpcenc.c CVE-2020-27828 - jasper: Out of bounds read in jp2decode in jp2dec.c CVE-2021-26926 -...

CentOS 8 : compat-exiv2-026 (CESA-2021:4319)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4319 advisory. - exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS CVE-2021-31292 - exiv2: Out-of-bounds read in...