19840 matches found
SUSE: Security Advisory (SUSE-SU-2022:1912-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5458-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5458-1 advisory. It was discovered that Vim was incorrectly handling virtual column position operations, which could result in an out-of-bounds read. An attacker could...
SUSE SLES15 Security Update : hdf5 (SUSE-SU-2022:1910-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1910-1 advisory. Security issues fixed: - CVE-2020-10811: Fixed heap-based buffer over-read in the function H5Olayoutdecode located in H5Olayout.c bsc1167405. -...
CVE-2022-30540 Horner Automation Cscape Csfont
The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code...
CVE-2022-30540
The CVE-2022-30540 entry relates to Horner Automation Cscape Csfont. The vulnerability is a heap-based buffer overflow via an uninitialized pointer, which could allow an attacker to execute arbitrary code. Affected product: Cscape Csfont (versions up to 9.90 SP5). Impact is high (C:H/I:H/A:H) per...
CVE-2022-30540: Heap-based Buffer Overflow
The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code...
Debian DSA-5155-1 : wpewebkit - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5155 advisory. The following vulnerabilities have been discovered in the WPE WebKit web engine: CVE-2022-26700 ryuzaki discovered that processing maliciously crafted web content...
CVE-2022-1942
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
CVE-2022-1942: Heap-based Buffer Overflow
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
PT-2022-3447
Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to a heap-based buffer overflow in the Vim text editor, specifically in the vim regsub both function, which can be exploited by a remote attacker to execute arbitrary code. This overfl...
CVE-2022-31003: Heap-based Buffer Overflow
Sofia-SIP is an open-source Session Initiation Protocol SIP User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp message, rest = record + 2 will access the memory behind \0 and cause an out-of-bounds write. An attacker can send a message with evil sdp to FreeSWITCH, causin...
CVE-2022-1942
CVE-2022-1942 is a vim/vim vulnerability (affecting Vim prior to 8.2) where a heap-based buffer overflow can be triggered by opening a command-line window from a substitute expression. Debian LTS advisory DLA-3204-1 (vim 2:8.1.0875-5+deb10u4) and Debian 11/NVD entries categorize it as a heap-base...
Ubuntu 16.04 ESM : NTFS-3G vulnerability (USN-5452-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5452-1 advisory. It was discovered that NTFS-3G was incorrectly validating NTFS metadata in its ntfsck tool by not performing boundary checks. A local attacker could possibly use...
CVE-2022-31782
CVE-2022-31782 affects ftbench.c in FreeType Demo Programs up to version 2.12.1, causing a heap-based buffer overflow. The connected advisories enumerate this CVE in EulerOS/Astra Linux contexts, but no exploit details or patch/version information is provided in the documents.
CVE-2022-31782
ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow...
CVE-2022-31782
ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow...
CVE-2022-31782
ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow...
CVE-2022-31782
ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow...
Security Bulletin: PowerVC installation on RHEL is vulnerable to MariaDB with CVE-2021-46669, CVE-2022-24048, MariaDB - 219814, MariaDB - 219815, CVE-2022-24050, CVE-2022-24052
Summary Summary guidance: MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used and it is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the processing of SQL queries. The specific flaw exists...