Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5723-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5723-1 advisory. It was discovered that Vim could be made to crash when searching specially crafted patterns. An attacker could possibly use this to crash Vim and cause...

NewStart CGSL MAIN 6.02 : libwebp Multiple Vulnerabilities (NS-SA-2022-0091)

The remote NewStart CGSL host, running version MAIN 6.02, has libwebp packages installed that are affected by multiple vulnerabilities: - A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16. CVE-2018-25009 - A heap-based buffer overflow was found in libwebp in...

Heap-based Buffer Overflow

chromium is vulnerable to heap-based buffer overflow. The vulnerability exists in WebSQL in Google Chrome which allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

SUSE: Security Advisory (SUSE-SU-2022:3959-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AlmaLinux 8 : rsync (ALSA-2022:7793)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7793 advisory. - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications tha...

NewStart CGSL MAIN 6.02 : file Vulnerability (NS-SA-2022-0086)

The remote NewStart CGSL host, running version MAIN 6.02, has file packages installed that are affected by a vulnerability: - cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-2783)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2783)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101. CVE-2022-2571 - Undefined Behavior for Input to API in GitHub repository...

CVE-2022-3974

A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is the function AP4StdcFileByteStream::ReadPartial of the file Ap4StdCFileByteStream.cpp of the component mp4info. The manipulation leads to heap-based buffer overflow. The attack can be launched...

MGASA-2022-0423 Updated pixman packages fix security vulnerability

In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an integer overflow in pixmansamplefloory. CVE-2022-44638...

CVE-2022-3974

A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is the function AP4StdcFileByteStream::ReadPartial of the file Ap4StdCFileByteStream.cpp of the component mp4info. The manipulation leads to heap-based buffer overflow. The attack can be launched...

CVE-2022-3974: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is the function AP4StdcFileByteStream::ReadPartial of the file Ap4StdCFileByteStream.cpp of the component mp4info. The manipulation leads to heap-based buffer overflow. The attack can be launched...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : busybox (SUSE-SU-2022:3959-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3959-1 advisory. - Enable switchroot With this change virtme --force-initramfs works as expected. - Enable udhcpc...

CVE-2022-3974

CVE-2022-3974 affects Axiomatic Bento4, specifically the ReadPartial function in Ap4StdCFileByteStream.cpp (mp4info). The issue is a heap-based buffer overflow that can be exploited remotely. Public exploit information is available and the vulnerability is tracked as VDB-213553. Connected sources...

Heap overflow

Netatalk through 3.1.13 has an afpgetappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD used for TrueNAS...

CVE-2022-45188

Netatalk through 3.1.13 has an afpgetappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD used for TrueNAS...

CVE-2022-45188: Out-of-bounds Write

Netatalk through 3.1.13 has an afpgetappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD used for TrueNAS...

Debian DSA-5276-1 : pixman - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5276 advisory. Maddie Stone reported a heap-based buffer overflow flaw in pixman, a pixel-manipulation library for X and cairo, which could result in denial of service or potentially the...

OPENSUSE-SU-2022:10196-1 Security update for libmodbus

This update for libmodbus fixes the following issues: - CVE-2022-0367: Fixed heap-based Buffer Overflow in modbusreply boo1195124...

Security update for libmodbus (important)

openSUSE Security Update: Security update for libmodbus Announcement ID: openSUSE-SU-2022:10196-1 Rating: important References: 1195124 Cross-References: CVE-2022-0367 CVSS scores: CVE-2022-0367 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP...