19956 matches found
SUSE-SU-2022:1746-1 Security update for libyajl
This update for libyajl fixes the following issue: - CVE-2022-24795: Fixed a heap-based buffer overflow when handling large inputs due to an integer overflow bsc1198405...
Ubuntu 16.04 ESM : ncurses vulnerabilities (USN-5477-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5477-1 advisory. Hosein Askari discovered that ncurses was incorrectly performing memory management operations when dealing with long filenames while writing structures...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1832)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2022-1822)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe InCopy < 16.4.2 / 17.0 < 17.3.0 Multiple Vulnerabilities (APSB22-29)
The version of Adobe InCopy installed on the remote host is prior to 16.4.2, 17.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-29 advisory. - Adobe InCopy versions 17.2 and earlier and 16.4.1 and earlier are affected by an Out-Of-Bounds Write vulnerability...
CVE-2022-2061
Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0...
EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-1832)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. CVE-2022-0943 Note that Tenable Network Security has...
EulerOS 2.0 SP10 : vim (EulerOS-SA-2022-1822)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. CVE-2022-0943 Note that Tenable Network Security has...
heap-buffer-overflow in dex_parse
Description There exists a heap based out of bounds read vulnerability in dexparse c setinteger yrle16tohmapitem-type, dex-object, "maplist.mapitem%i.type", i; Reproduction Build the fuzz target with address sanitizer enabled + optional libfuzzer and run the test case from here $ git rev-parse HE...
Debian DSA-5160-1 : ntfs-3g - security update
The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5160 advisory. - ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+5123-2. NOTE: the upstream position is that ntfsck is deprecated;...
Debian DLA-3050-1 : vlc - LTS security update
The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3050 advisory. Multiple vulnerabilities were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed media file is...
Swftools Use After Release Vulnerability
Swftools is a set of utilities for working with Adobe Flash files SWF files. A post-release use vulnerability exists in Swftools 2020-12-22 and prior versions, which stems from a heap-based post-release reuse issue in the function swfFontExtractDefineTextCallback located in swftext.c. The...
SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2022:2030-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2030-1 advisory. - A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 a...
MGASA-2022-0223 Updated vim packages fix security vulnerability
out-of-bounds read in gcharcursor in misc1.c CVE-2022-1851 use-after-free in findpatterninpath in search.c CVE-2022-1898 out-of-bounds write in vimregsubboth in regexp.c CVE-2022-1897 buffer over-read in utfptr2char in mbyte.c CVE-2022-1927 out of bounds write in vimregsubboth CVE-2022-1942...
Updated vim packages fix security vulnerability
out-of-bounds read in gcharcursor in misc1.c CVE-2022-1851 use-after-free in findpatterninpath in search.c CVE-2022-1898 out-of-bounds write in vimregsubboth in regexp.c CVE-2022-1897 buffer over-read in utfptr2char in mbyte.c CVE-2022-1927 out of bounds write in vimregsubboth CVE-2022-1942...
Important: vim
Issue Overview: A heap based out-of-bounds write flaw was found in vim's ops.c. This flaw allows an attacker to trick a user to open a crafted file triggering an out-of-bounds write. This vulnerability is capable of crashing software, modify memory, and possible code execution. CVE-2022-0261 A fl...
Fixed CVE-2022-24903 in rsyslog
CVE-2022-24903: fix heap-based overflow in TCP syslog server...
Denial Of Service (DoS)
ntfs-3g is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer overflow involving buffer+5123-2 allowing an attacker to crash the system...
