CVE-2022-26061

CVE-2022-26061 describes a heap-based buffer overflow in the gif2h5 functionality of libhdf5 (HDF5 Group) up to version 1.10.4. A specially crafted GIF file can lead to code execution. Affected component: HDF5 libhdf5 1.10.4, function gif2h5. Root cause: heap overflow in GIF-to-HDF5 conversion pa...

CVE-2022-26061

A heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10.4. A specially-crafted GIF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

PT-2022-4359 · Libhdf5 +3 · Libhdf5 +3

Name of the Vulnerable Software and Affected Versions: libhdf5 version 1.10.4 Description: The issue is related to a heap-based buffer overflow vulnerability in the gif2h5 functionality of the libhdf5 library. This vulnerability can be exploited by opening a specially crafted GIF file, potentiall...

GLSA-202208-32 : Vim, gVim: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-32 Vim, gVim: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Vim and gVim. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

SUSE SLES12 Security Update : zlib (SUSE-SU-2022:2845-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:2845-1 advisory. - CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field bsc1202175. Tenable has extracted the precedin...

SUSE SLES12: libz1 / libz1-32bit / zlib-devel / zlib-devel-32bit / etc (SUSE-SU-2022:2847-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2847-1 advisory. - CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field bsc1202175. Tenable has extracted t...

CVE-2020-27792

A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000printpage function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service...

CVE-2020-27792

CVE-2020-27792 is a heap-based buffer overflow in Ghostscript affecting the lp8000_print_page() path (gdevlp8k.c). The flaw can be triggered by a crafted PDF, potentially causing memory corruption or a denial of service. The vulnerability is cited across multiple advisories (Ghostscript/GhostPDL)...

CVE-2020-27792

A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000printpage function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service...

Heap-based Buffer Overflow

vim is vulnerable to heap-based buffer overflow. A malicious user is able to cause the application to crash due to a heap-based buffer overflow in function compilelockunlock in vim/src/vim9cmds.c...

SUSE: Security Advisory (SUSE-SU-2022:2847-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : rsync vulnerability (USN-5573-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5573-1 advisory. Evgeny Legerov discovered that zlib incorrectly handled memory when performing certain inflate operations. An attacker could use this issu...

CVE-2022-37047

The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in getipv6next at common/get.c:713. NOTE: this is different from CVE-2022-27940...

CVE-2022-37048

The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in getl2lenprotocol at common/get.c:344. NOTE: this is different from CVE-2022-27941...

Heap overflow

The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in getl2lenprotocol at common/get.c:344. NOTE: this is different from CVE-2022-27941...

CVE-2022-37049

The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parsempls at common/get.c:150. NOTE: this is different from CVE-2022-27942...

CVE-2022-37047

The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in getipv6next at common/get.c:713. NOTE: this is different from CVE-2022-27940...

Heap overflow

The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in getipv6next at common/get.c:713. NOTE: this is different from CVE-2022-27940...

SUSE-SU-2022:2847-1 Security update for zlib

This update for zlib fixes the following issues: - CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field bsc1202175...

CVE-2022-37049

CVE-2022-37049 affects Tcpreplay 4.4.1, specifically the tcpprep component with a heap-based buffer overflow in parse_mpls (common/get.c:150). Documents confirm this CVE as part of a broader set of Tcpreplay vulnerabilities; advisories indicate fixes in Tcpreplay 4.4.2 (e.g., Mageia, Fedora). Imp...