Mageia: Security Advisory (MGASA-2022-0319)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-38533

A vulnerability was found in the strip utility of binutils. An attacker able to convince a victim to process a specially crafted COFF file by the strip utility can lead to a heap-based buffer overflow, causing the utility to crash. Mitigation Do not process untrusted files with the strip utility...

Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-077)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-077 advisory. A flaw was found in vim. The vulnerability occurs due to a crash when recording and using Select mode and leads to an out-of-bounds read. This flaw allows an attacker to input a specially craft...

CVE-2022-39832

An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function readstring in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2022-39831

An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function readbytesinternal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact. This issue is different from CVE-2018-20230...

CVE-2022-39831

An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function readbytesinternal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact. This issue is different from CVE-2018-20230...

CVE-2022-39831

An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function readbytesinternal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact. This issue is different from CVE-2018-20230...

Heap overflow

An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function readstring in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2022-39831

An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function readbytesinternal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact. This issue is different from CVE-2018-20230...

CVE-2022-39832

PSPP 1.6.2 contains a heap-based buffer overflow in read_string (utilities/pspp-dump-sav.c) that can cause a denial of service (application crash) or possibly other impact. Exploitation details are not provided beyond the CVE description; CVSS data indicates local attack vector with high impact o...

Heap-based Buffer Overflow

exim4 is vulnerable to heap-based buffer overflow. The vulnerability exists in the alias list in hostnamelookup in host.c. When the senderhostname is set an attacker is able to cause buffer overflows...

SUSE SLED15: gdk-pixbuf-devel / gdk-pixbuf-devel-32bit / gdk-pixbuf-lang / etc (SUSE-SU-2022:2995-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2995-1 advisory. Update to version 2.42.8, including the following: - CVE-2021-46829: Fixed a heap-based buffer overflow...

SUSE SLED15: gdk-pixbuf-devel / gdk-pixbuf-devel-32bit / gdk-pixbuf-lang / etc (SUSE-SU-2022:2996-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2996-1 advisory. - CVE-2021-46829: Fixed overflow when compositing or clearing frames bsc1201826. Tenable has extracted th...

PT-2022-4809 · Unknown +2 · Libconfuse +2

Name of the Vulnerable Software and Affected Versions: libConfuse version 3.3 Description: The issue is related to a heap-based buffer over-read in the cfg tilde expand function of the libConfuse library. This can be exploited by a remote attacker using a specially crafted file, potentially leadi...

Buffer Overflow

vim is vulnerable to heap-based buffer overflow. The vulnerability exists in the latinptr2len function in src/mbyte.c due to lack of validation memory access, allowing an attacker to perform arbitrary out of bound writes...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.1.5)

The version of AOS installed on the remote host is prior to 5.19.1.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.19.1.5 advisory. - Perl before 5.30.3 has an integer overflow related to mishandling of a PLregkindOPn == NOTHING situation. A crafted regul...

SUSE SLES15 Security Update : bluez (SUSE-SU-2022:2948-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2948-1 advisory. - CVE-2022-0204: Fixed a buffer overflow in the implementation of the gatt protocol bsc1194704. - CVE-2019-8922: Fixed a buffer...

openSUSE: Security Advisory for zlib (SUSE-SU-2022:2947-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.10.9)

The version of AOS installed on the remote host is prior to 5.10.9. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.10.9 advisory. - Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get...

Denial Of Service (DoS)

connman is vulnerable to denial of service. The vulnerability exists due to the heap-based buffer overflow in receiveddata execute code, allowing an attacker to crash the application by sending the HTTP requests to the gweb component...