EulerOS Virtualization 2.11.1 : libtiff (EulerOS-SA-2024-2157)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection at tools/tiffcrop.c:7916 and tools/tiffcrop.c:780...

Google Chrome < 128.0.6613.84 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 128.0.6613.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 202408stable-channel-update-for-desktop21 advisory. - Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a...

Amazon Linux 2 : qemu (ALAS-2024-2624)

The version of qemu installed on the remote host is prior to 3.1.0-8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2624 advisory. QEMU: sdhci: heap buffer overflow in sdhciwritedataport CVE-2024-3447 A flaw was found in the QEMU disk image utility qemu-im...

Google Android Out-of-Bounds Read Vulnerability (CNVD-2024-37973)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an out-of-bounds read vulnerability caused by a heap buffer overflow in sdpucompareuuidwithattr in sdputils.cc. An attacker can exploit this vulnerability to obtain sensitive information...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 38 security fixes: 358296941 High CVE-2024-7964: Use after free in Passwords. Reported by Anonymous on 2024-08-08 356196918 High CVE-2024-7965: Inappropriate implementation in V8. Reported by TheDog on 2024-07-30 355465305 High CVE-2024-7966: Out of...

SUSE: Security Advisory (SUSE-SU-2024:2052-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: qemu

Issue Overview: QEMU: sdhci: heap buffer overflow in sdhciwritedataport CVE-2024-3447 A flaw was found in the QEMU disk image utility qemu-img 'info' command. A specially crafted image file containing a json: value describing block devices in QMP could cause the qemu-img process on the host to...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2024-2182)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:2052-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.11.0 : libtiff (EulerOS-SA-2024-2182)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection at tools/tiffcrop.c:7916 and tools/tiffcrop.c:780...

OSV-2024-1034 Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf16be

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71218 Crash type: Heap-buffer-overflow WRITE Crash state: simdutf::haswell::implementation::convertutf8toutf16be Conversion Conversion...

OSV-2024-987 Heap-buffer-overflow in pcpp::NDPNeighborAdvertisementLayer::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66599 Crash type: Heap-buffer-overflow READ 16 Crash state: pcpp::NDPNeighborAdvertisementLayer::toString pcpp::Packet::toStringList pcpp::Packet::toString...

OSV-2024-967 Heap-buffer-overflow in pcpp::byteArrayToHexString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68520 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::byteArrayToHexString pcpp::PacketTrailerLayer::toString FuzzTarget.cpp...

OSV-2024-963 Heap-buffer-overflow in GfxTilingPattern::scanXObjectForBlendMode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68412 Crash type: Heap-buffer-overflow READ 1 Crash state: GfxTilingPattern::scanXObjectForBlendMode GfxTilingPattern::scanSoftMaskForBlendMode GfxTilingPattern::scanExtGStateForBlendMode...

OSV-2024-957 Heap-buffer-overflow in pcpp::computeChecksum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66025 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::computeChecksum pcpp::computePseudoHdrChecksum pcpp::TcpLayer::calculateChecksum...

OSV-2024-947 Heap-buffer-overflow in pcpp::SomeIpSdEntry::SomeIpSdEntry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68654 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::SomeIpSdEntry::SomeIpSdEntry pcpp::SomeIpSdLayer::getEntries readParsedPacket...

OSV-2024-919 Heap-buffer-overflow in validate_relpath

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66547 Crash type: Heap-buffer-overflow READ 2 Crash state: validaterelpath loadmodulemeta fmodulemeta...

OSV-2024-831 Heap-buffer-overflow in jv_parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66929 Crash type: Heap-buffer-overflow READ 4 Crash state: jvparse ftonumber jqnext...

PT-2024-40892 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 16 crash has been reported. The crash occurs in the pcpp::NDPNeighborAdvertisementLayer::toString function, which is called b...

CBL Mariner 2.0 Security Update: libtiff (CVE-2023-52356)

The version of libtiff installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-52356 advisory. - A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to th...