14927 matches found
PHP 7.1.x < 7.1.31 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 7.1.x prior to 7.1.31, 7.2.x prior to 7.2.21 or 7.3.x prior to 7.3.8. It is, therefore, affected by the following vulnerabilities: - A heap-based buffer overflow condition exists on exifscanthumbnail. An attacker can...
CVE-2019-14274
MCPP 2.7.2 has a heap-based buffer overflow in the domsg function in support.c...
libguestfs-winsupport security update
7.2-3 - Fix for CVE-2019-9755 heap-based buffer overflow leads to local root privilege escalation resolves: rhbz1698502...
RHEL 7 : elfutils (RHSA-2019:2197)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2197 advisory. The elfutils packages contain a number of utility programs and libraries related to the creation and maintenance of executable code. The...
NewStart CGSL CORE 5.04 / MAIN 5.04 : freerdp Multiple Vulnerabilities (NS-SA-2019-0074)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has freerdp packages installed that are affected by multiple vulnerabilities: - FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function updatereadbitmapupdate and...
Debian: Security Advisory (DSA-4496-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
NewStart CGSL CORE 5.04 / MAIN 5.04 : keepalived Vulnerability (NS-SA-2019-0051)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has keepalived packages installed that are affected by a vulnerability: - Heap-based buffer overflow vulnerability in extractstatuscode function in lib/html.c that parses HTTP status code returned from web server allows malicio...
RHEL 7 : ovmf (RHSA-2019:2125)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2125 advisory. OVMF Open Virtual Machine Firmware is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI...
NewStart CGSL MAIN 5.04 : procmail Vulnerability (NS-SA-2019-0005)
The remote NewStart CGSL host, running version MAIN 5.04, has procmail packages installed that are affected by a vulnerability: - A heap-based buffer overflow flaw was found in procmail's formail utility. A remote attacker could send a specially crafted email that, when processed by formail, coul...
RHEL 7 : binutils (RHSA-2019:2075)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2075 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includ...
NewStart CGSL MAIN 4.05 : gnutls Multiple Vulnerabilities (NS-SA-2019-0109)
The remote NewStart CGSL host, running version MAIN 4.05, has gnutls packages installed that are affected by multiple vulnerabilities: - Stack-based buffer overflow in the cdkpkgetkeyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have...
NewStart CGSL MAIN 4.05 : poppler Vulnerability (NS-SA-2019-0118)
The remote NewStart CGSL host, running version MAIN 4.05, has poppler packages installed that are affected by a vulnerability: - An integer overflow leading to heap-based buffer overflow was found in the poppler library. An attacker could create a malicious PDF file that would cause applications...
SUSE SLED12 / SLES12 Security Update : tcpdump (SUSE-SU-2019:2088-1)
This update for tcpdump fixes the following issues : Security issues fixed : CVE-2019-1010220: Fixed a buffer over-read in printprefix which may expose data bsc1142439. CVE-2017-16808: Fixed a heap-based buffer over-read related to aoeprint and lookupemem bsc1068716. Note that Tenable Network...
Buffer Over-Read
The elfutils package is vulnerable to heap-based buffer over-read in libdw/dwarfgetaranges.c:dwarfgetaranges through a malicious file...
Buffer Overflows
elfutils is vulnerable to heap-based buffer over-read. It is possible in libdw/dwarfgetabbrev.c and libwd/dwarfhasattr.c, leading to an application crash...
Denial Of Service (DoS)
elfutils is vulnerable to denial of service DoS. It causes a heap-based buffer over-read in libdw/dwarfgetaranges.c:dwarfgetaranges via a malicious file...
Denial Of Service (DoS)
elfutils is vulnerable to denial of service DoS attack. The attack is due to a heap-based buffer over-read occured in the function readsrclines in dwarfgetsrclines.c in libdw in elfutils when an attacker passes a malicious input file...
Denial Of Service (DoS)
exiv2 is vulnerable to heap-based buffer over-read. It is due to a flaw in PngChunk::readRawProfile in pngchunkint.cpp...
Denial Of Service (Dos)
libjpeg-turbo is vulnerable to denial of service. A heap-based buffer over-read in the function get8bitrow in rdbmp.c allows an attacker to cause a denial of service using a malicious 80-bit BMP...
