10979 matches found
RHEL 8 : openjpeg (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openjpeg: Heap-based buffer overflow in function t2encodepacket in src/lib/openmj2/t2.c CVE-2018-16376 - ...
RHEL 6 : vim (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - vim: Integer overflow at an unserializeuep memory allocation site CVE-2017-6350 - vim: Heap-based Buffer...
RHEL 6 : openjpeg (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openjpeg: Stack-buffer overflow in the pgxtoimage function CVE-2017-17479 - openjpeg: heap-based buffer...
RHEL 7 : openjpeg (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openjpeg: Stack-buffer overflow in the pgxtoimage function CVE-2017-17479 - openjpeg: heap-based buffer...
RHEL 7 : gstreamer-plugins-bad (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio...
CVE-2024-33877
HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Tconvstructopt in H5Tconv.c...
CVE-2024-32615
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Znbitdecompressonebyte in H5Znbit.c, caused by the earlier use of an initialized pointer...
CVE-2024-33877
CVE-2024-33877 affects HDF5 Library up to version 1.14.3, with a heap-based buffer overflow in H5T__conv_struct_opt (H5Tconv.c). This is cited in connected advisories as a vulnerability in HDF5 1.14.x, with public documentation of the same root cause. The Tencent/Tenable listings confirm the issu...
CVE-2024-33877
HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Tconvstructopt in H5Tconv.c...
CVE-2024-33877
HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Tconvstructopt in H5Tconv.c...
CVE-2024-33875
HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Olayoutencode in H5Olayout.c, resulting in the corruption of the instruction pointer...
CVE-2024-33873
CVE-2024-33873 affects the HDF5 Library up to version 1.14.3 and involves a heap-based buffer overflow in H5D__scatter_mem (H5Dscatgath.c). The vulnerability is reported across multiple security feeds (e.g., Azure Linux 3.0 Nessus, vendor advisories) and is mitigated by upgrading to HDF5 1.14.4 o...
CVE-2024-33873
HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Dscattermem in H5Dscatgath.c...
CVE-2024-32624
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Trefmemsetnull in H5Tref.c called from H5Tconvref in H5Tconv.c, resulting in the corruption of the instruction pointer...
CVE-2024-32623
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VMarrayfill in H5VM.c called from H5Sselectelements in H5Spoint.c...
CVE-2024-32621
HDF5 Library up to 1.14.3 suffers a heap-based buffer overflow in H5HG_read (H5HG.c), invoked via H5VL__native_blob_get, which leads to instruction-pointer corruption. This affects HDF5 1.14.x and can enable denial of service or potential code execution. The issue is fixed in 1.14.4 per vendor ad...
CVE-2024-32621
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HGread in H5HG.c called from H5VLnativeblobget in H5VLnativeblob.c, resulting in the corruption of the instruction pointer...
CVE-2024-32621
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HGread in H5HG.c called from H5VLnativeblobget in H5VLnativeblob.c, resulting in the corruption of the instruction pointer...
CVE-2024-32618
CVE-2024-32618 affects HDF5 Library up to v1.14.3, where a heap-based overflow in H5T__get_native_type (H5Tnative.c) can corrupt the instruction pointer. Impact is denial of service and potential code execution. The issue is fixed in HDF5 1.14.4; users should upgrade to 1.14.4 or later. The CVE e...