3178 matches found
SUSE SLES12: libp11-kit0 / libp11-kit0-32bit / p11-kit / p11-kit-32bit / etc (SUSE-SU-2022:2871-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2871-1 advisory. - CVE-2020-29362: Fixed a 4 byte overread that could lead to crashes bsc1180065 Tenable has extracted the preceding description block direct...
Ubuntu 16.04 ESM / 18.04 LTS : zlib vulnerability (USN-5570-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5570-1 advisory. Evgeny Legerov discovered that zlib incorrectly handled memory when performing certain inflate operations. An attacker could use this issue to cause...
Ubuntu 16.04 ESM : libcdio vulnerabilities (USN-5558-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5558-1 advisory. Zhao Liang discovered that libcdio was not properly performing memory management operations when processing ISO files, which could result in a heap buffe...
Ubuntu 16.04 ESM : libjpeg-turbo vulnerabilities (USN-5553-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5553-1 advisory. It was discovered that libjpeg-turbo was not properly handling EOF characters, which could lead to excessive memory consumption through the execution of ...
CVE-2022-37434: Out-of-bounds Write
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call...
CVE-2022-35409
An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information...
CVE-2022-35409
An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information...
CVE-2022-35409: Out-of-bounds Read
An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information...
CVE-2022-35409
An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information...
CVE-2022-35409
Mbed TLS DTLS heap over-read CVE-2022-35409: unauthenticated clients can send a malformed ClientHello to a DTLS server with MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN below a config-dependent threshold, causing a heap-based over-read of up to 255 bytes and possibly ...
CVE-2022-35409
An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information...
CVE-2022-34300
In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData...
CVE-2022-34299
There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarfglobalformrefb...
CVE-2022-34299
CVE-2022-34299 affects libdwarf 0.4.0 with a heap-based buffer over-read in function dwarf_global_formref_b. The vulnerability can lead to a crash/denial of service as described by Red Hat and related sources. Several connected records indicate fixes for newer libdwarf versions (e.g., 0.4.2 in OS...
CVE-2022-34299
There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarfglobalformrefb...
CVE-2022-34299
There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarfglobalformrefb...
PT-2022-22115
Name of the Vulnerable Software and Affected Versions libdwarf version 0.4.0 Description The issue is a heap-based buffer over-read in libdwarf, related to the dwarf global formref b function. Recommendations For libdwarf version 0.4.0, at the moment, there is no information about a newer version...
CVE-2022-34299: Out-of-bounds Read
There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarfglobalformrefb...