19738 matches found
PT-2023-22112
Name of the Vulnerable Software and Affected Versions Cesanta Mongoose version 7.10 Description The issue arises from a failure to validate the length of a provided MQTT CMD PUBLISH parsed message with a variable length header, leading to a heap-based buffer overflow vulnerability in the default...
CVE-2023-38154: Heap-based Buffer Overflow
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2023-36532: Heap-based Buffer Overflow
Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access...
CVE-2023-36896: Heap-based Buffer Overflow
Microsoft Excel Remote Code Execution Vulnerability...
Medium: ImageMagick
Issue Overview: A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel function in quantum-private.h. This issue may allow a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error and allowing an application to crash,...
Heap-based Buffer Overflow
wireshark is vulnerable to Heap-based Buffer Overflow. The vulnerability exists due to failure in validating the length provided which allows an attacker to execute arbitrary codes using a crafted RTPS packet causing an application crash...
Heap-Based Buffer Overflow
sngrep is vulnerable to Heap-Based Buffer Overflow. The vulnerability exists in the capturepacketreasmip function of /src/capture.c where a stack-based buffer overflow could be triggered by a local attacker...
Heap-based Buffer Overflow
libmp4v2.so is vulnerable to Heap-based Buffer Overflow. The vulnerability is due to not validating the input parameter newSize of function Resize in the file mp4array.h . This can lead to buffer overflow while allocating memory to MP4Array array...
openSUSE 15: libMagick++-7_Q16HDRI4 / libMagick++-7_Q16HDRI4-32bit / etc (SUSE-SU-2023:3186-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:3186-1 advisory. - CVE-2023-3745: Fixed heap out of bounds read in PushCharPixel in quantum-private.h bsc1213624. Tenable has extracted the preceding description block direct...
CVE-2023-37557 CODESYS Heap-based Buffer Overflow in multiple products
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, which can lead to a denial-of-service condition...
CVE-2023-38747
Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-ALD-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur...
Heap-based Buffer Overflow
libopenbabel.so is vulnerable to Heap-based Buffer Overflow. The vulnerability exists in the ReadMolecule function at orcaformat.cpp when parsing an input file due to improper handling of the buffer size, which allows an attacker to provide a specially-crafted malformed file resulting in arbitrar...
CVE-2023-38747: Out-of-bounds Write
Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-ALD-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur...
CVE-2023-3180: Heap-based Buffer Overflow
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtiocryptohandlesymreq. There is no check for the value of srclen and dstlen in virtiocryptosymophelper, potentially leading to a heap buffer overflow when the two values differ...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-6270-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6270-1 advisory. It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user...
CVE-2023-4016: Heap-based Buffer Overflow
Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-2496)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-2471)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES12: qemu / qemu-arm / qemu-audio-alsa / qemu-audio-oss / qemu-audio-pa / etc (SUSE-SU-2023:3015-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3015-1 advisory. - CVE-2021-4207: Fixed double fetch in qxlcursor that could lead to heap buffer overflow bsc1198037. - CVE-2023-0330: Fixed DMA...
