Slackware Linux 15.0 / current vim Multiple Vulnerabilities (SSA:2022-229-01)

The version of vim installed on the remote host is prior to 8.2.4649 / 9.0.0223. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-229-01 advisory. - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0211. CVE-2022-2816 - Use After Free in GitHub...

CVE-2022-37047

CVE-2022-37047 affects Tcpreplay v4.4.1 (component tcprewrite). It describes a heap-based buffer overflow in get_ipv6_next at common/get.c:713. Exploitation details are not provided in the given documents, but multiple sources note the issue alongside other CVEs for Tcpreplay and indicate a fixed...

CVE-2022-37047

The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in getipv6next at common/get.c:713. NOTE: this is different from CVE-2022-27940...

CVE-2022-37049

The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parsempls at common/get.c:150. NOTE: this is different from CVE-2022-27942...

Fixed CVEs in exim: CVE-2022-37451, CVE-2022-37452

CVE-2022-37452: fix heap-based buffer overflow for the alias list in hostnamelookup - CVE-2022-37451: fix invalid free in pamconverse...

CVE-2022-2849

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220...

EulerOS 2.0 SP5 : vim (EulerOS-SA-2022-2282)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protecti...

CVE-2022-2849

CVE-2022-2849: Heap-based buffer overflow in Vim (vim/vim) prior to version 9.0.0220. The issue is triggered during certain file handling and memory operations, enabling potential crash or memory corruption when a specially crafted file is opened. Affected software is the Vim editor; impact is de...

CVE-2022-2849 Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-2263)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...

Heap-based Buffer Overflow

vim/vim is vulnerable to heap-based buffer overflow. The vulnerability exists in insexpand.c because it reads past end of completion with a long line and 'infercase' which allows an attacker to cause a buffer overflow...

Denial Of Service (DoS)

vim:sid is vulnerable to denial of service. The vulnerability exists due to heap-based buffer overflow in GitHub repository...

Heap-based Buffer Overflow in function compile_lock_unlock in vim/vim

Description Heap-based Buffer Overflow in function compilelockunlock at vim/src/vim9cmds.c:196 vim version git log commit 326c5d36e7cb8526330565109c17b4a13ff790ae grafted, HEAD - master, tag: v9.0.0194, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -X -Z -e -s -S poc2hboM.dat -c :qa!...

Heap overflow

Adobe FrameMaker versions 2019 Update 8 and earlier and 2020 Update 4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must...

CVE-2022-35676 Adobe FrameMaker SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe FrameMaker versions 2019 Update 8 and earlier and 2020 Update 4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must...

CVE-2022-35677

Adobe FrameMaker 2019 Update 8 and earlier, and 2020 Update 4 and earlier, are affected by a heap-based buffer overflow (CVE-2022-35677) that could allow arbitrary code execution in the context of the current user when a malicious file is opened. Exploitation requires user interaction. Remediatio...

CVE-2022-35677 Adobe FrameMaker SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe FrameMaker versions 2019 Update 8 and earlier and 2020 Update 4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must...

Denial Of Service (DoS)

vim is vulnerable to denial of service. It is possible to cause heap-based buffer overflow in GitHub repository which allows an attacker to crash the application by providing malicious input...

Schneider Electric EcoStruxure, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: EcoStruxure, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70 Vulnerabilities: Heap-based Buffer Overflow, Wrap or Wraparound, Classic Buffer Overflow,...

Siemens JT2Go < 13.3.0.5 RCE (SSA-829738)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 13.3.0.5. It is, therefore, affected by a heap-based buffer overflow flaw that could cause a denial of service DoS condition or remote code execution if exploited by an attacker. Note that Nessus has not tested for thi...