AIX 7.3 TL 1 : zlib (IJ44986)

https://vulners.com/cve/CVE-2022-37434 zlib is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by inflate in inflate.c. By using a large gzip header extra field, a remote attacker could overflow a buffer and execute arbitrary code on the system. %NASLMINLEVEL 70300 ...

EulerOS Virtualization 3.0.6.6 : libjpeg-turbo (EulerOS-SA-2023-2398)

According to the versions of the libjpeg-turbo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a...

EulerOS Virtualization 3.0.6.6 : vim (EulerOS-SA-2023-2442)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. CVE-2022-1725 - Buffer Over-read in GitHub repository vim/v...

Security Bulletin: IBM App Connect Enterprise Certified Container Dashboard operands are vulnerable to arbitrary code execution due to [CVE-2022-28805]

Summary Lua is not used directly by IBM App Connect Enterprise Certified Container at runtime, but is present in the Dashboard operand images. Lua is vulnerable to arbitrary code execution. This bulletin provides patch information to address the reported vulnerability in Lua. CVE-2022-28805...

CVE-2023-21406

Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. By appending invalid data to an OSDP...

CVE-2023-21406 Heap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication

Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. By appending invalid data to an OSDP...

CVE-2023-21406 Heap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication

Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. By appending invalid data to an OSDP...

CVE-2023-21406

The CVE-2023-21406 issue affects Axis A1001 door controllers when using OSDP. A heap-based buffer overflow in the pacsiod process handling OSDP communication allows writing outside the allocated heap buffer by appending invalid data to an OSDP message, potentially enabling arbitrary code executio...

CVE-2023-21406: Heap-based Buffer Overflow

Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. By appending invalid data to an OSDP...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-2434)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2023-2398)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Heap overflow

A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel function in quantum-private.h. This issue may allow a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error and allowing an application to crash, resulting in a...

CVE-2023-3745 Imagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.h

A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel function in quantum-private.h. This issue may allow a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error and allowing an application to crash, resulting in a...

CVE-2023-3745 Imagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.h

A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel function in quantum-private.h. This issue may allow a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error and allowing an application to crash, resulting in a...

Heap-based Buffer Overflow

gpac is vulnerable to Heap-based Buffer Overflow. A local malicious attaker is able to leverage the vulnerability within the gfm2tsprocesssdt of mediatools/mpegts.c to cause a heap-based buffer overflow...

CVE-2023-3745: Out-of-bounds Read

A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel function in quantum-private.h. This issue may allow a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error and allowing an application to crash, resulting in a...

Out-of-Bounds Write

gifsicle is vulnerable to Out-of-Bounds Write. The vulnerability is found in ambiguityerror within /src/clp.c which allows a local attacker to cause a heap-based buffer overflow...

Out-of-Bounds Write

sngrep is vulnerable to Out-of-Bounds Write. The vulnerability is found in capturewscheckpacket within /src/capture.c which allows a local attacker to cause a heap-based buffer overflow...

CVE-2022-46289: Heap-based Buffer Overflow

Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.nAtoms...

CVE-2022-46290: Heap-based Buffer Overflow

Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.The loop that...