CVE-2021-39254

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfsattrrecordresize, in NTFS-3G 2021.8.22...

CVE-2021-39256

A crafted NTFS image can cause a heap-based buffer overflow in ntfsinodelookupbyname in NTFS-3G 2021.8.22...

CVE-2021-39261

A crafted NTFS image can cause a heap-based buffer overflow in ntfscompressedpwrite in NTFS-3G 2021.8.22...

CVE-2021-39254

The CVE-2021-39254 issue affects NTFS-3G prior to 2021.8.22, where a crafted NTFS image can trigger an integer overflow in memmove, causing a heap-based buffer overflow in ntfs_attr_record_resize. Connected advisories confirm NTFS-3G is the vulnerable component and that upgrades to a fixed versio...

CVE-2021-39254

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfsattrrecordresize, in NTFS-3G 2021.8.22...

Fedora 34 : 2:vim (2021-5fa81a2b04)

The remote Fedora 34 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-5fa81a2b04 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3770 Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2021-39256

A crafted NTFS image can cause a heap-based buffer overflow in ntfsinodelookupbyname in NTFS-3G 2021.8.22...

CVE-2021-3770

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3770

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3770

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3770

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3770

CVE-2021-3770 : Vim is affected by a heap-based buffer overflow. In connected MARINER data, the issue is listed as affecting package vim 8.1.1667-1; an upgraded version is available that resolves the vulnerability. Remediation: upgrade vim to a newer package version as indicated by the advisory.

SUSE SLED12: file / file-devel / file-magic / libmagic1 / libmagic1-32bit / etc (SUSE-SU-2021:2930-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2930-1 advisory. - CVE-2019-18218: Fixed heap-based buffer overflow in cdfreadpropertyinfo in cdf.c bsc1154661. Tenable has extracted the preceding...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input using the “ctts” FOURCC code can cause an integer overflow due t...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input used to process an atom using the “saio” FOURCC code cause an integer...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input in “stsz” decoder can cause an integer overflow due to unchecked...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition...

Denial Of Service (DoS)

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflo...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. When processing the 'hdlr' FOURCC code, a specially crafted MPEG-4 input can cause an improper...