CVE-2021-43312

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf64::invertptdynamic at plxelf.cpp:5239...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-1589)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. CVE-2022-3520 - Heap based buffer overflow in vim/vim 9.0.0946 and below...

CVE-2021-43314

CVE-2021-43314 describes a heap-based buffer overflow in UPX, triggered in PackLinuxElf32::elf_lookup() via an inaccessible address addressed by the generic pointer p in get_le32() (p_lx_elf.cpp:5368). The issue is under UPX ELF32 parsing and, per connected advisories, was addressed by updating U...

CVE-2021-43312

CVE-2021-43312 is a heap-based buffer overflow in UPX affecting the Linux ELF packing path, specifically PackLinuxElf64::invert_pt_dynamic at p_lx_elf.cpp:5239. Multiple connected sources (including OSV entries and openSUSE/SUSE advisories) confirm the vulnerability and the affected component, wi...

CVE-2021-43314

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5368...

CVE-2021-43316

CVE-2021-43316 affects UPX, where a heap-based buffer overflow occurs in the get_le64() function when processing a pointer p to an inaccessible address. The vulnerability impacts availability (per CVSS: HIGH) with no confidentiality/integrity impact, and is linked to UPX ELF packing paths. Public...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2023-1579)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. CVE-2022-3520 - Heap based buffer overflow in vim/vim 9.0.0946 and below...

Ubuntu: Security Advisory (USN-5969-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-43314

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5368...

CVE-2021-43316

A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle64...

CVE-2021-43317

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf64::elflookup at plxelf.cpp:5404...

CVE-2021-43315

CVE-2021-43315 affects upx; a heap-based buffer overflow occurs in UPX’s PackLinuxElf32::elf_lookup() at p_lx_elf.cpp:5349 due to a mis-managed pointer. Public disclosures in OSV/OpenSUSE advisories indicate fixes in UPX release 4.0.2. If unpatched, vulnerable versions of upx may crash or be expl...

CVE-2021-43311

CVE-2021-43311 : A heap-based buffer overflow was discovered in UPX, triggered in PackLinuxElf32::elf_lookup() via a pointer in get_le32() (p_lx_elf.cpp:5382). Public coverage across OSV/NVD confirms the issue in UPX, affecting Linux ELF packing paths. The vulnerability description specifies a he...

CVE-2021-43311

A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5382...

CVE-2021-43313

UPX is affected by CVE-2021-43313: a heap-based buffer overflow in PackLinuxElf32::invert_pt_dynamic (p_lx_elf.cpp:1688) when processing ELF inputs. Several connected sources confirm the issue and reference the same function/path. The OSV/OpenSUSE advisory indicates this CVE was addressed in the ...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1589)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : gif2apng vulnerabilities (USN-5969-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5969-1 advisory. It was discovered that gif2apng contained multiple heap-base overflows. An attacker could potentially exploit this to cause a...

CVE-2023-1570

A vulnerability, which was classified as problematic, has been found in syoyo tinydng. Affected by this issue is the function interceptormemcpy of the file tinydngloader.h. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been...

Heap overflow

A vulnerability, which was classified as problematic, has been found in syoyo tinydng. Affected by this issue is the function interceptormemcpy of the file tinydngloader.h. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been...

CVE-2023-1570 syoyo tinydng tiny_dng_loader.h __interceptor_memcpy heap-based overflow

A vulnerability, which was classified as problematic, has been found in syoyo tinydng. Affected by this issue is the function interceptormemcpy of the file tinydngloader.h. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been...