Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in LibTIFF

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of LibTIFF. Vulnerability Details CVEID: CVE-2020-19131 DESCRIPTION: LibTIFF is vulnerable to a denial of service, caused by a heap-based buffer overflow in the invertImage function. By persuading a victim to op...

Debian DLA-3058-1 : libsndfile - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3058 advisory. Two issues have been found in libsndfile, a library for reading/writing audio files. CVE-2017-12562 Due to a possible heap buffer overflow attack in an attacker...

CVE-2022-2207

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

PT-2022-3436

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to a heap-based buffer overflow in the Vim text editor, specifically in the ins bs function located in edit.c. This overflow occurs in dynamic memory and can be exploited by a remote...

CVE-2022-2207

CVE-2022-2207 : Heap-based buffer overflow in vim/vim prior to 8.2. The initial description confirms the vulnerability. Connected sources enumerate Vim-related CVEs and indicate that this family of issues affects Vim before 8.2 and that fixes are delivered via Vim updates. The Astra/ALAS advisori...

CVE-2022-2207

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-2207: Heap-based Buffer Overflow

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

Denial Of Service (DoS)

chafa is vulnerable to denial of service. An attacker can crash the application through the heap-based-buffer overflow...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156: Heap-Based Buffer Overflow in Sudo Baron Samed...

CVE-2022-32137

In CVE-2022-32137, multiple CODESYS products are affected by a heap-based buffer overflow that an unauthenticated, low-privilege remote attacker can trigger by crafting a request. This condition can result in a Denial of Service or a memory overwrite, with no user interaction required. The NVD en...

CVE-2022-32137 CODESYS Runtime System prone to heap based buffer overflow

In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction is not required...

PT-2022-3271

Name of the Vulnerable Software and Affected Versions CODESYS products affected versions not specified Description A low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction i...

CVE-2022-32137: Heap-based Buffer Overflow

In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction is not required...

PT-2022-3438

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to a heap-based buffer overflow in the parse cmd address function of the Vim text editor. This can be exploited by a remote attacker to execute arbitrary code. Recommendations For...

CVE-2022-2182

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

CVE-2022-2182: Heap-based Buffer Overflow

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...

EulerOS 2.0 SP8 : vim (EulerOS-SA-2022-1953)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in vim/vim prior to 8.2. CVE-2022-0319 - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. CVE-2022-0361 -...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1953)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2022:10017-1 Security update for chafa

This update for chafa fixes the following issues: - CVE-2022-2061: Fix heap based buffer overflow in lzwdecode boo1200510...

CVE-2021-45918: Heap-based Buffer Overflow

NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without...