19841 matches found
CVE-2021-38439
All versions of GurumDDS are vulnerable to heap-based buffer overflow, which may cause a denial-of-service condition or remotely execute arbitrary code...
Heap overflow
All versions of GurumDDS are vulnerable to heap-based buffer overflow, which may cause a denial-of-service condition or remotely execute arbitrary code...
CVE-2021-38439
GurumNetworks GurumDDS is reported vulnerable to a heap-based buffer overflow (CVE-2021-38439). All versions are affected; impact per sources includes potential denial-of-service or remote code execution. The connected documents do not specify a concrete patch version or remediation steps. Monito...
CVE-2022-24903
A flaw was found in rsyslog's reception TCP modules. This flaw allows an attacker to craft a malicious message leading to a heap-based buffer overflow. This issue allows the attacker to corrupt or access data stored in memory, leading to a denial of service in the rsyslog or possible remote code...
CVE-2021-38439: Heap-based Buffer Overflow
All versions of GurumDDS are vulnerable to heap-based buffer overflow, which may cause a denial-of-service condition or remotely execute arbitrary code...
EulerOS Virtualization 2.9.0 : aide (EulerOS-SA-2022-1625)
According to the versions of the aide package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1617)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1641)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.9.1 : vim (EulerOS-SA-2022-1617)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Out-of-bounds Read CVE-2021-4166, CVE-2021-4193 - vim is vulnerable to Use After Free CVE-2021-4192 - vim is...
EulerOS Virtualization 2.9.0 : vim (EulerOS-SA-2022-1641)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Out-of-bounds Read CVE-2021-4166, CVE-2021-4193 - vim is vulnerable to Use After Free CVE-2021-4192 - vim is...
PT-2022-10726
Name of the Vulnerable Software and Affected Versions GurumDDS versions all Description The issue is related to a heap-based buffer overflow, which may lead to a denial-of-service condition or allow for the remote execution of arbitrary code. Recommendations For all versions, at the moment, there...
CVE-2022-30292
Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sqreservestack call...
CVE-2022-30292
Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sqreservestack call...
CVE-2022-30292: Out-of-bounds Write
Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sqreservestack call...
CVE-2022-20106
In MM service, there is a possible out of bounds write due to a heap-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03330460; Issue ID: DTV03330460...
CVE-2021-27417 eCosCentric eCosPro RTOS Integer Overflow or Wraparound
eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc an implementation of malloc. The unverified memory assignment can lead to arbitrary memory allocation, resulting in a heap-based buffer overflow...
CVE-2022-20106
The CVE-2022-20106 entry concerns the MM service, with a heap-based buffer overflow causing an out-of-bounds write that could enable local privilege escalation to SYSTEM. Exploit details or in-the-wild activity are not provided in the documents. No user interaction is required. Remediation refere...
CVE-2021-27417: Integer Overflow or Wraparound
eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc an implementation of malloc. The unverified memory assignment can lead to arbitrary memory allocation, resulting in a heap-based buffer overflow...
PT-2022-9810
Name of the Vulnerable Software and Affected Versions eCosCentric eCosPro RTOS versions 2.0.1 through 4.5.3 Description The issue concerns an integer wraparound in the calloc function, which is an implementation of malloc. This can lead to unverified memory assignment, resulting in arbitrary memo...
PT-2022-14350
Name of the Vulnerable Software and Affected Versions MM service affected versions not specified Description The issue is related to a heap-based buffer overflow in the MM service, which could lead to a local escalation of privilege with System execution privileges needed. User interaction is not...