19860 matches found
Huawei EulerOS: Security Advisory for gdb (EulerOS-SA-2024-1525)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-31036
A heap-buffer-overflow vulnerability in the readbyte function in NanoMQ v.0.21.7 allows attackers to cause a denial of service via transmission of crafted hexstreams...
PT-2024-23735 · Nanomq · Nanomq
Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.21.7 Description: A heap-buffer-overflow issue in the read byte function allows attackers to cause a denial of service via transmission of crafted hexstreams. Recommendations: For NanoMQ version 0.21.7, consider disabling the...
RHEL 6 / 7 : php54 (RHSA-2015:1066)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1066 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release...
RHEL 9 : shim update (Important) (RHSA-2024:1903)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1903 advisory. The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments...
RHEL 8 : shim (RHSA-2024:1902)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1902 advisory. The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments...
CVE-2023-50009
FFmpeg v.n6.1-3-g466799d4f5 allows a heap-based buffer overflow via the ffgaussianblur8 function in libavfilter/edgetemplate.c:116:5 component...
Heap Buffer Overflow
torch is vulnerable to a Heap Buffer Overflow. The vulnerability is due to improper size checks in the tupleConstruct function within varargfunctions.cpp, allowing attackers to cause a Denial of Service DoS...
EulerOS Virtualization 2.10.0 : gdb (EulerOS-SA-2024-1525)
According to the versions of the gdb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function peas16 at /gdb/coff-pe-read.c...
EulerOS Virtualization 2.10.1 : binutils (EulerOS-SA-2024-1542)
According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow vulnerability in binutils readelf before 2.40 via function findsectioninset in file readelf.c. CVE-2022-448...
EulerOS Virtualization 2.10.0 : edk2 (EulerOS-SA-2024-1541)
According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable function, allowing a user to trigger a heap buffer overflow via a...
EulerOS Virtualization 2.10.1 : gdb (EulerOS-SA-2024-1544)
According to the versions of the gdb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function peas16 at /gdb/coff-pe-read.c...
EulerOS Virtualization 2.10.0 : binutils (EulerOS-SA-2024-1523)
According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow vulnerability in binutils readelf before 2.40 via function findsectioninset in file readelf.c. CVE-2022-448...
Important: Red Hat Security Advisory: shim security update
An update for shim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Important: Red Hat Security Advisory: shim security update
An update for shim is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems
A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This fl...
OSV-2024-272 Heap-buffer-overflow in DDS_Security_Deserialize_ParticipantBuiltinTopicData
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68028 Crash type: Heap-buffer-overflow READ 2 Crash state: DDSSecurityDeserializeParticipantBuiltinTopicData fuzzsecuritydeser.c...
OSV-2024-267 Heap-buffer-overflow in SetDataFormat
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68047 Crash type: Heap-buffer-overflow WRITE 8 Crash state: SetDataFormat ParseIT8 cmsIT8LoadFromMem...
RHEL 9 : shim update (Important) (RHSA-2024:1876)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1876 advisory. The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments...
Important: shim bug fix update
The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments. Security Fixes: shim: RCE in http boot support may lead to Secure Boot bypass CVE-2023-40547 shim: Interger overflow leads to heap buffer overflow in...