OSV-2023-1149 Heap-buffer-overflow in bit_read_fixed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64118 Crash type: Heap-buffer-overflow READ 16 Crash state: bitreadfixed bitreadTF decodepreR13sentinel...

OSV-2023-1147 Heap-buffer-overflow in parse_by_block_type

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64114 Crash type: Heap-buffer-overflow READ Crash state: parsebyblocktype lightreadrecord lightgetnextpacket...

PT-2023-35579 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash has been reported. The crash occurs in the computeChecksum function, which is called by computeCalculateFields in the...

PT-2023-35581 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash occurred in the pcpp::SSLClientHelloMessage::getCipherSuite function, as reported by OSS-Fuzz. The crash was triggere...

PT-2023-35582 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash occurs in the pcpp::SomeIpSdEntry::SomeIpSdEntry and pcpp::SomeIpSdLayer::getEntries...

PT-2023-35577 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash occurs in the following functions: parse by block type, light read record, and light...

PT-2023-35578 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include a crash type of Heap-buffer-overflow READ 16, with the crash state...

OSV-2023-1140 Heap-buffer-overflow in H5MM_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64092 Crash type: Heap-buffer-overflow READ Crash state: H5MMstrdup H5Gstabgetnamebyidxcb H5Gnodebyidx...

cups security and bug fix update

1:2.3.3op2-21 - bump the spec because the previous build was made with buildroot 9.2 1:2.3.3op2-20 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation 1:2.3.3op2-19 - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient in scheduler/client.c - CVE-2023-32324 cups: heap...

Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2023-3186)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for LibRaw (EulerOS-SA-2023-3134)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OSV-2023-1126 Heap-buffer-overflow in iasecc_parse_acls

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63949 Crash type: Heap-buffer-overflow READ 1 Crash state: iaseccparseacls iaseccparsedocp iaseccsdoparsedata...

CVE-2023-5941

In versions of FreeBSD 12.4-RELEASE prior to 12.4-RELEASE-p7 and FreeBSD 13.2-RELEASE prior to 13.2-RELEASE-p5 the sflush stdio function in libc does not correctly update FILE objects' write space members for write-buffered streams when the write2 system call returns an error. Depending on the...

CVE-2023-5941

CVE-2023-5941 affects FreeBSD: libc stdio __sflush() may heap-buffer overflow on write(2) errors for line-buffered streams, impacting 12.4-RELEASE before 12.4-p7 and 13.2-RELEASE before 13.2-p5. Consequence is data corruption or arbitrary code execution at the attacker’s privileges depending on a...

DEBIAN-CVE-2023-47359

Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...

Rocky Linux 8 : openjpeg2 (RLSA-2021:4251)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4251 advisory. - Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote...

Moderate: cups security and bug fix update

The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: cups: heap buffer overflow may lead to DoS CVE-2023-32324 cups: use-after-free in cupsdAcceptClient in scheduler/client.c CVE-2023-34241 For more details about t...

Rocky Linux 9 : lua (RLSA-2022:7329)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7329 advisory. - An issue in the component luaGrunerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs. CVE-2022-33099 Note that Nessus h...

Fedora 39 : libvpx (2023-10ff82e497)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-10ff82e497 advisory. Security fix for CVE-2023-5217 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 39 : firefox (2023-6bdc468df7)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-6bdc468df7 advisory. This update provides Firefox 117.0.1, with a significant security fix for CVE-2023-4863 and various bug fixes. Tenable has extracted the preceding...