17293 matches found
CVE-2023-29370: Heap-based Buffer Overflow
Windows Media Remote Code Execution Vulnerability...
CVE-2023-29363: Heap-based Buffer Overflow
Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...
CVE-2023-33129: Heap-based Buffer Overflow
Microsoft SharePoint Server Denial of Service Vulnerability...
Ubuntu 20.04 LTS : GNU binutils vulnerability (USN-6160-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6160-1 advisory. It was discovered that GNU binutils incorrectly performed bounds checking operations when parsing stabs debugging information. An attacker could possibly use this...
EulerOS Virtualization 3.0.6.0 : vim (EulerOS-SA-2023-2251)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing...
EulerOS Virtualization 3.0.6.0 : krb5 (EulerOS-SA-2023-2222)
According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code...
CVE-2023-33146: Heap-based Buffer Overflow
Microsoft Office Remote Code Execution Vulnerability...
CVE-2023-27997: Heap-based Buffer Overflow
A heap-based buffer overflow vulnerability CWE-122 in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all...
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests...
Amazon Linux AMI : pcre (ALAS-2023-1767)
The version of pcre installed on the remote host is prior to 8.21-7.9. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1767 advisory. Heap-based buffer overflow in the findfixedlength function in pcrecompile.c in PCRE before 8.38 allows remote attackers to...
EulerOS 2.0 SP5 : vim (EulerOS-SA-2023-2179)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. CVE-2022-3520 - Heap based buffer overflow in vim/vim 9.0.0946 and below...
EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2023-2157)
According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file...
EulerOS 2.0 SP5 : samba (EulerOS-SA-2023-2168)
According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and...
EulerOS 2.0 SP5 : ghostscript (EulerOS-SA-2023-2144)
According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000printpage function in the gdevlp8k.c file. This flaw allows an...
Security Bulletin: CVE-2022-48303 may affect IBM CICS TX Advanced 10.1
Summary CVE-2022-48303 may affect IBM CICS TX Advanced 10.1. IBM CICS TX Advanced 10.1 has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2022-48303 DESCRIPTION: GNU Tar is vulnerable to a heap-based buffer overflow, caused by an out-of-bounds read in the fromheader function in...
Heap-based Buffer Overflow
libopensc.so is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to the cardoshaveverifyrcpackage function in pkcs15-cardos.c because it scans the ASN1 buffer for 2 tags, but the remaining length can be wrongly calculated due to a moved starting pointer, allowing an attacker...
RenderDoc 1.26 Local Privilege Escalation / Remote Code Execution
Qualys Security Advisory LPE and RCE in RenderDoc: CVE-2023-33865, CVE-2023-33864, CVE-2023-33863 ======================================================================== Contents ======================================================================== Summary CVE-2023-33865, a symlink...
Amazon Linux 2023 : wireshark-cli, wireshark-devel (ALAS2023-2023-197)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-197 advisory. Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version between 4.0.0 to 4.0.5, by default, is susceptible to a heap-based buffer overflow, and...
Amazon Linux 2 : squid (ALAS-2023-2081)
The version of squid installed on the remote host is prior to 3.5.20-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2081 advisory. An issue was discovered in Squid before 4.9. URN response handling in Squid suffers from a heap-based buffer overflow. When receivi...
