10979 matches found
OPENSUSE-SU-2022:10196-1 Security update for libmodbus
This update for libmodbus fixes the following issues: - CVE-2022-0367: Fixed heap-based Buffer Overflow in modbusreply boo1195124...
Security update for libmodbus (important)
openSUSE Security Update: Security update for libmodbus Announcement ID: openSUSE-SU-2022:10196-1 Rating: important References: 1195124 Cross-References: CVE-2022-0367 CVSS scores: CVE-2022-0367 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP...
Debian dla-3182 : vim - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3182 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3182-1 [email protected]...
CentOS 8 : yajl (CESA-2022:7524)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7524 advisory. - yajl: heap-based buffer overflow when handling large inputs due to an integer overflow CVE-2022-24795 Note that Nessus has not tested for this issue but has...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : pixman vulnerability (USN-5718-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5718-1 advisory. Maddie Stone discovered that pixman incorrectly handled certain memory operations. A remote attacker could use this issue to cause pixman ...
Moderate: Red Hat Security Advisory: yajl security update
An update for yajl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
yajl security update
An update is available for yajl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Yet Another JSON Library YAJL is a small event-driven SAX-style JSON parser...
CVE-2022-24903: A flaw in rsyslog TCP module could allows an attacker to craft a malicious message leading to a heap-based buffer overflow.
Rsyslog is vulnerable to remote code execution RCE due to improper validation of input data when octet-counted framing is used. An attacker could exploit this vulnerability by supplying a system with maliciously crafted messages. Products Affected. Brocade SANnav - Fixed in Brocade SANnav 2.2.1...
Moderate: yajl security update
Yet Another JSON Library YAJL is a small event-driven SAX-style JSON parser written in ANSI C and a small validating JSON generator. Security Fixes: yajl: heap-based buffer overflow when handling large inputs due to an integer overflow CVE-2022-24795 For more details about the security issues,...
CVE-2022-24903: A flaw in rsyslog TCP module could allow an attacker to craft a malicious message leading to a heap-based buffer overflow. (BSA-2022-2127)
Security Advisory ID: BSA-2022-2127 Component: Rsyslog Revision: 1.0 Rsyslog is vulnerable to remote code execution RCE due to improper validation of input data when octet-counted framing is used. An attacker could exploit this vulnerability by supplying a system with maliciously crafted messages...
Siemens Teamcenter Visualization and JT2Go
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
RHEL 8 : yajl (RHSA-2022:7524)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7524 advisory. Yet Another JSON Library YAJL is a small event-driven SAX-style JSON parser written in ANSI C and a small validating JSON generator. Security Fixes:...
Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to loss of integrity due to CVE-2022-1621
Summary Vim is not used directly by IBM App Connect Enterprise Certified Container but is present in the operand images as part of the base operating system. Use of vim within IBM App Connect Enterprise Certified Container operands may be vulnerable to loss of integrity. This bulletin provides...
Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to arbitrary code execution due to CVE-2022-2124, CVE-2022-2125, CVE-2022-2126 and CVE-2022-2129
Summary Vim is not used directly by IBM App Connect Enterprise Certified Container but is present in the operand images as part of the base operating system. Use of vim within IBM App Connect Enterprise Certified Container operands may be vulnerable to arbitrary code execution. This bulletin...
Buffer Overflow
giflib is vulnerable to heap-based buffer overflow. The vulnerability exists in function DumpScreen2RGB in gif2rgb.c which allows an attacker to cause a buffer overflow...
Denial Of Service (DoS)
libde265.so is vulnerable to denial of service DoS. A heap-based-buffer-overflow vulnerability is due the putepelhvfallback function in fallback-motion.cc, which allows a remote attacker to cause denial of service conditions via a crafted video file...
Denial Of Service (DoS)
libde265.so is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer overflow in the mcchroma function of motion.cc which allows an attacker to cause an application crash...
Denial Of Service (DoS)
libde265.so is vulnerable to denial of service DoS. A heap-based-buffer-overflow vulnerability exists due to the function putweightedpredavg16fallback in fallback-motion.cc, which allows a remote attacker to cause denial of service via a crafted video file...
Denial Of Service (DoS)
libde265.so is vulnerable to denial of service DoS. A heap-based-buffer-overflow vulnerability exists due to the putqpelfallback function in fallback-motion.cc which allows a remote attacker to cause denial of service via a crafted video file...
