20149 matches found
Oracle Linux 8 : virt:ol / and / virt-devel:ol (ELSA-2022-5821)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5821 advisory. libvirt 8.0.0-5.2.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 - Add runtime deps for pkg librbd1 = 1:10.2.5 Keshav Sharma 8.0.0-5.2.el8 -...
CVE-2022-34970
Crow before 1.0+4 has a heap-based buffer overflow via the function qsparse in querystring.h. On successful exploitation this vulnerability allows attackers to remotely execute arbitrary code in the context of the vulnerable service...
Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is vulnerable to sensitive information exposure due to GNU ncurses (CVE-2019-17595, CVE-2019-17594)
Summary IBM Sterling Connect:Direct for UNIX Certified Container bundles ncurses as third party packages in its container image which has the vulnerability where attacker can obtain sensitive information. This fix updates ncurses to 6.1-9.20180224.el8. Vulnerability Details CVEID:CVE-2019-17595...
GLSA-202208-04 : libmcpp: Denial of service
The remote host is affected by the vulnerability described in GLSA-202208-04 libmcpp: Denial of service - MCPP 2.7.2 has a heap-based buffer overflow in the domsg function in support.c. CVE-2019-14274 Note that Nessus has not tested for this issue but has instead relied only on the application's...
CVE-2021-46829
A heap-based buffer overflow vulnerability was found in GNOME GdkPixbuf aka GDK-PixBuf when compositing or clearing frames in GIF files. The vulnerability exists due to a boundary error when processing GIF images. This flaw allows an attacker to create a specially crafted GIF image, trick the...
CVE-2022-32292
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in receiveddata to execute code...
CVE-2022-32292
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in receiveddata to execute code...
CVE-2022-32292
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in receiveddata to execute code...
CVE-2022-32292
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in receiveddata to execute code...
CVE-2022-32292
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overflow in receiveddata to execute code...
CVE-2022-32292
ConnMan (through version 1.41) is vulnerable to a heap-based buffer overflow in the gweb component’s received_data function (CVE-2022-32292). Remote attackers could send HTTP requests to trigger code execution. A related issue (CVE-2022-32293) involves a WISPR handling use-after-free. Remediation...
openSUSE 15 Security Update : connman (openSUSE-SU-2022:10076-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10076-1 advisory. - In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer...
PT-2022-22636 · Nhi Card · Nhi Card
Name of the Vulnerable Software and Affected Versions: NHI card affected versions not specified Description: The issue is related to a heap-based buffer overflow vulnerability in the NHI card's web service component. This vulnerability is caused by insufficient validation for the packet origin...
AZL-10445 CVE-2022-2580 affecting package vim for versions less than 9.0.0325-1
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102...
Heap overflow
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101...
UBUNTU-CVE-2022-2571
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101...
CVE-2022-2580 Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102...
CVE-2022-2580 Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0102...
CVE-2022-2580
CVE-2022-2580 affects vim/vim; the issue is a heap-based buffer overflow in the project prior to 9.0.0102. Public descriptions consistently state a heap overflow in vim/vim’s code paths, leading to crashes and memory corruption. Public advisories and package trackers (Alpine, Debian, Mageia, etc....