Huawei EulerOS: Security Advisory for libvncserver (EulerOS-SA-2021-1321)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : lcms2 (EulerOS-SA-2021-1313)

According to the version of the lcms2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Little CMS aka Little Color Management System 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buff...

EulerOS 2.0 SP2 : libtiff (EulerOS-SA-2021-1320)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via crafted...

EulerOS 2.0 SP2 : sudo (EulerOS-SA-2021-1366)

According to the version of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via 'sudoedit -s' and a command-line argument that ends wi...

Huawei EulerOS: Security Advisory for dnsmasq (EulerOS-SA-2021-1374)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2021-1375)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for sox (EulerOS-SA-2021-1359)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-28248

An integer overflow in the PngImg::InitStorage function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an exploitable heap-based buffer overflow when loading a crafted PNG file...

Design/Logic Flaw

An integer overflow in the PngImg::InitStorage function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an exploitable heap-based buffer overflow when loading a crafted PNG file...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A heap-based buffer overflow in Tab Strip allows an attacker to execute arbitrary code on the host OS...

Amazon Linux 2 : perl (ALAS-2021-1610)

The version of perl installed on the remote host is prior to 5.16.3-299. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1610 advisory. Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers...

Mitsubishi Electric FA Engineering Software Products (Update H)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: FA Engineering Software Products Vulnerabilities: Heap-based Buffer Overflow, Improper Handling of Length Parameter Inconsistency 2. UPDATE INFORMATION This updated...

Debian DLA-2559-1 : busybox security update

Busybox, utility programs for small and embedded systems, was affected by several security vulnerabilities. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2011-5325 A path traversal vulnerability was found in Busybox implementation of tar. tar will extract a...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. An integer overflow and heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c allows an attacker to execute arbitrary code on the host OS...

CVE-2021-21017

CVE-2021-21017 affects Adobe Acrobat/Reader (DC Continuous and prior releases) with a heap-based buffer overflow that could allow arbitrary code execution in the user’s context after opening a malicious file. The linked exploit analyses describe a flaw in URL/baseURL handling within PDFs (potenti...

Adobe Reader < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 2017.011.30190, 2020.001.30020, or 2021.001.20135. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and...

Adobe Reader < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2017.011.30190, 2020.001.30020, or 2021.001.20135. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and...

macOS 10.14.x < 10.14.6 Security Update 2021-002 / 10.15.x < 10.15.7 Supplemental Update / macOS 11.x < 11.2.1 (HT212177)

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6 Security Update 2021-002 Mojave, 10.15.x prior to 10.15.7 Supplemental Update Catalina, or 11.x prior to 11.2.1 Big Sur. It is, therefore, affected by multiple vulnerabilities, including the following: - An...

Adobe Acrobat < 2017.011.30190 / 2020.001.30020 / 2021.001.20135 Multiple Vulnerabilities (APSB21-09)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2017.011.30190, 2020.001.30020, or 2021.001.20135. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and...

CVE-2020-27250

SoftMaker Office PlanMaker 2021 (Revision 1014) contains a heap-based buffer overflow in the Office Art record parsing path. The vulnerability involves 0x00eb MsoDrawingGroup processing and a nested OfficeArtDggContainer (0xf000) containing a 0xf150 sub-record. Depending on Version/Instance (0x00...