SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2022:2030-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2030-1 advisory. - A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 a...

Updated vim packages fix security vulnerability

out-of-bounds read in gcharcursor in misc1.c CVE-2022-1851 use-after-free in findpatterninpath in search.c CVE-2022-1898 out-of-bounds write in vimregsubboth in regexp.c CVE-2022-1897 buffer over-read in utfptr2char in mbyte.c CVE-2022-1927 out of bounds write in vimregsubboth CVE-2022-1942...

Denial Of Service (DoS)

ntfs-3g is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer overflow involving buffer+5123-2 allowing an attacker to crash the system...

CVE-2022-30788

A vulnerability was found in NTFS-3G. Incorrect validation of NTFS metadata can result in a heap-based buffer overflow when processing a crafted NTFS image file or partition...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1799)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1816)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5460-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5460-1 advisory. It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal memory access and expose...

Heap-Based Buffer Overflow

blender is vulnerable to heap-based buffer overflow. The vulnerability exists due to missing bounds check in the image loader which leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution...

SUSE SLES15 Security Update : hdf5, suse-hpc (SUSE-SU-2022:1911-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1911-1 advisory. Security issues fixed: - CVE-2020-10811: Fixed heap-based buffer over-read in the function H5Olayoutdecode located in H5Olayout.c bsc1167405. -...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5458-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5458-1 advisory. It was discovered that Vim was incorrectly handling virtual column position operations, which could result in an out-of-bounds read. An attacker could...

SUSE: Security Advisory (SUSE-SU-2022:1912-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : hdf5 (SUSE-SU-2022:1910-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1910-1 advisory. Security issues fixed: - CVE-2020-10811: Fixed heap-based buffer over-read in the function H5Olayoutdecode located in H5Olayout.c bsc1167405. -...

CVE-2022-30540 Horner Automation Cscape Csfont

The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code...

CVE-2022-30540

The CVE-2022-30540 entry relates to Horner Automation Cscape Csfont. The vulnerability is a heap-based buffer overflow via an uninitialized pointer, which could allow an attacker to execute arbitrary code. Affected product: Cscape Csfont (versions up to 9.90 SP5). Impact is high (C:H/I:H/A:H) per...

Debian DSA-5155-1 : wpewebkit - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5155 advisory. The following vulnerabilities have been discovered in the WPE WebKit web engine: CVE-2022-26700 ryuzaki discovered that processing maliciously crafted web content...

CVE-2022-1942

CVE-2022-1942 is a vim/vim vulnerability (affecting Vim prior to 8.2) where a heap-based buffer overflow can be triggered by opening a command-line window from a substitute expression. Debian LTS advisory DLA-3204-1 (vim 2:8.1.0875-5+deb10u4) and Debian 11/NVD entries categorize it as a heap-base...

Ubuntu 16.04 ESM : NTFS-3G vulnerability (USN-5452-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5452-1 advisory. It was discovered that NTFS-3G was incorrectly validating NTFS metadata in its ntfsck tool by not performing boundary checks. A local attacker could possibly use...

CVE-2022-31782

ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow...

CVE-2022-31782

ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow...

CVE-2022-31782

CVE-2022-31782 affects ftbench.c in FreeType Demo Programs up to version 2.12.1, causing a heap-based buffer overflow. The connected advisories enumerate this CVE in EulerOS/Astra Linux contexts, but no exploit details or patch/version information is provided in the documents.