Slackware: Security Advisory (SSA:2023-025-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-42403: Heap-based Buffer Overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

Ubuntu 20.04 LTS / 22.04 LTS : Samba vulnerabilities (USN-5822-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5822-1 advisory. It was discovered that Samba incorrectly handled the bad password count logic. A remote attacker could possibly use this issue to bypass bad...

Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2023-269)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2023-269 advisory. The target's backtrace indicates that libc has detected a heap error or that the target was executing a heap function when it stopped. This could be due to heap corruption, passing a bad pointer to a he...

Siemens SCALANCE X Products Heap-Based Buffer Overflow (CVE-2020-15800)

A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants All versions V5.2.5, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.5.0, SCALANCE X-300 switch family incl. X408 and SIPLUS NET variants All versions V4.1.0. The webserver of t...

Siemens Web Server of SCALANCE X200 Heap-Based Buffer Overflow (CVE-2021-25668)

A vulnerability has been identified in SCALANCE X200-4P IRT All versions 5.5.1, SCALANCE X201-3P IRT All versions 5.5.1, SCALANCE X201-3P IRT PRO All versions 5.5.1, SCALANCE X202-2 IRT All versions 5.5.1, SCALANCE X202-2P IRT incl. SIPLUS NET variant All versions 5.5.1, SCALANCE X202-2P IRT PRO...

Slackware Linux 15.0 / current vim Vulnerability (SSA:2023-025-02)

The version of vim installed on the remote host is prior to 9.0.1241. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-025-02 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. CVE-2023-0433 Note that Nessus has not tested for this...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Kerberos vulnerabilities (USN-5828-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5828-1 advisory. It was discovered that Kerberos incorrectly handled certain S4U2Self requests. An attacker could possibly use this...

Amazon Linux AMI : vim (ALAS-2023-1663)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1663 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. CVE-2022-3520 - Use After Free in GitHub repository vim/vim prior to 9.0.0789. CVE-2022-3591 - A vulnerability was foun...

Amazon Linux AMI : krb5 (ALAS-2023-1667)

It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1667 advisory. Integer overflow vulnerabilities in PAC parsing CVE-2022-42898 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has not tested for...

Heap overflow

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image...

CVE-2022-1892: Heap-based Buffer Overflow

A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code...

CVE-2022-48281: Out-of-bounds Write

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image...

CVE-2022-1891: Heap-based Buffer Overflow

A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code...

RHEL 7 : rh-php73-php (RHSA-2020:5275)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5275 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later...

CVE-2022-48281

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., "WRITE of size 307203" via a crafted TIFF image...

CVE-2022-1890: Heap-based Buffer Overflow

A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code...

Amazon Linux 2 : vim (ALAS-2023-1912)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-1912 advisory. The target's backtrace indicates that libc has detected a heap error or that the target was executing a heap function when it stopped. This could be due to heap corruption, passing a bad pointer to a heap...

Fedora 37 : upx (2023-89fdc22ace)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-89fdc22ace advisory. Patches for CVE-2023-23456 and CVE-2023-23457 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 36 : upx (2023-8d91390935)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8d91390935 advisory. Patches for CVE-2023-23456 and CVE-2023-23457 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...