Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : PHP vulnerabilities (USN-6757-2)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6757-2 advisory. USN-6757-1 fixed vulnerabilities in PHP. Unfortunately these fixes were incomplete for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu...

ASB-A-317780080

In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

LibRaw: a heap-buffer-overflow in raw2image_ex()

A flaw was found in LibRaw. A heap-buffer-overflow in raw2imageex caused by a maliciously crafted file may lead to an application crash...

Low: Red Hat Security Advisory: LibRaw security update

An update for LibRaw is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

perl: Write past buffer end via illegal user-defined Unicode property

A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer...

Moderate: Red Hat Security Advisory: xorg-x11-server security update

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c in bfd_getl64

A heap based buffer overflow was found in binutils-gdb/bfd/libbfd.c in bfdgetl64 in binutils...

Moderate: Red Hat Security Advisory: mingw components security update

An update for mingw components is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

Moderate: Red Hat Security Advisory: libjpeg-turbo security update

An update for libjpeg-turbo is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Moderate: Red Hat Security Advisory: xorg-x11-server-Xwayland security update

An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

OSV-2024-393 Heap-buffer-overflow in pcpp::BgpLayer::getHeaderLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67346 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::BgpLayer::getHeaderLen pcpp::Packet::shortenLayer pcpp::BgpUpdateMessageLayer::setPathAttributes...

OSV-2024-390 Heap-buffer-overflow in H5O__cache_chk_serialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67889 Crash type: Heap-buffer-overflow READ Crash state: H5Ocachechkserialize H5Cgenerateimage H5Cflushsingleentry...

OSV-2024-389 Heap-buffer-overflow in JS_CallInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67611 Crash type: Heap-buffer-overflow READ 1 Crash state: JSCallInternal asyncfuncresume jsasyncfunctionresume...

OSV-2024-387 Heap-buffer-overflow in H5F_addr_encode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68301 Crash type: Heap-buffer-overflow WRITE 1 Crash state: H5Faddrencode H5Ofsinfoencode H5Omsgflush...

OSV-2024-381 Heap-buffer-overflow in H5F__accum_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67852 Crash type: Heap-buffer-overflow READ Crash state: H5Faccumfree H5MFxfree H5MFfreeaggrs...

OSV-2024-370 Heap-buffer-overflow in H5O__chunk_protect

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67820 Crash type: Heap-buffer-overflow READ 8 Crash state: H5Ochunkprotect H5Ochunkdelete H5Ocontdelete...

OSV-2024-360 Heap-buffer-overflow in pcpp::TelnetLayer::getFieldLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67752 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::TelnetLayer::getFieldLen pcpp::TelnetLayer::getFirstCommand readParsedPacket...

OSV-2024-352 Heap-buffer-overflow in __parse_options

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68156 Crash type: Heap-buffer-overflow READ Crash state: parseoptions parseoptions parseoptions...

OSV-2024-343 Heap-buffer-overflow in pcpp::BgpUpdateMessageLayer::setPathAttributes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67971 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::BgpUpdateMessageLayer::setPathAttributes pcpp::BgpUpdateMessageLayer::clearPathAttributes readParsedPacket...