OSV-2023-1354 Heap-buffer-overflow in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65304 Crash type: Heap-buffer-overflow READ 2 Crash state: processClientServerHello processTLSBlock ndpisearchtlsudp...

PT-2023-35669 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash has been reported. The crash occurs in the processClientServerHello function, specifically in the process tls and fuz...

PT-2023-35667 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the processClientServerHello and processTLSBlock...

OSV-2023-1352 Heap-buffer-overflow in Flow::dissectMDNS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65271 Crash type: Heap-buffer-overflow READ Crash state: Flow::dissectMDNS NetworkInterface::processPacket NetworkInterface::dissectPacket...

OSV-2023-1350 Heap-buffer-overflow in inflate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65236 Crash type: Heap-buffer-overflow READ 1 Crash state: inflate uncompress2 uncompress...

PT-2023-35664 · Git +1 · C-Blosc2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs during the execution of the inflate function, specifically within the uncompress2 and...

Fedora 39 : thunderbird (2023-7dee358171)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-7dee358171 advisory. Update to 115.6.0 ; - https://www.mozilla.org/en-US/security/advisories/mfsa2023-55/ -...

Fedora 38 : chromium (2023-ed327967b4)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-ed327967b4 advisory. update to 120.0.6099.129 - High CVE-2023-7024: Heap buffer overflow in WebRTC Tenable has extracted the preceding description block directly from the Fedora...

CVE-2023-48704

ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

CVE-2023-48704

ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

CVE-2023-48704 Unauthenticated heap buffer overflow in Gorrila codec decompression

ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

CVE-2023-48704

The CVE-2023-48704 issue affects ClickHouse server and is caused by a heap buffer overflow in the Gorilla codec decompression logic. An unauthenticated attacker can send a crafted payload to the native interface (default port 9000/tcp) to crash the ClickHouse server. Public details in connected s...

OSV-2023-1344 Heap-buffer-overflow in jv_string_vfmt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65198 Crash type: Heap-buffer-overflow READ 2 Crash state: jvstringvfmt jvstringfmt jvget...

OSV-2023-1343 Heap-buffer-overflow in _libssh2_kex_agree_instr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65212 Crash type: Heap-buffer-overflow READ Crash state: libssh2kexagreeinstr libssh2packetadd fullpacket...

GLSA-202312-09 : NASM: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202312-09 NASM: Multiple Vulnerabilities - In Netwide Assembler NASM 2.14.02, there is a use-after-free in pastetokens in asm/preproc.c. CVE-2019-8343 - A Segmentation Fault issue discovered in in ieeesegment function in outieee.c...

GLSA-202312-06 : Exiv2: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202312-06 Exiv2: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Exiv2. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...

CentOS 7 : firefox (RHSA-2023:5477)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:5477 advisory. - During the worker lifecycle, a use-after-free condition could have occured, which could have led to a potentially exploitable crash. This vulnerabili...

PT-2023-35661 · Libssh2 · Libssh2

Name of the Vulnerable Software and Affected Versions: libssh2 affected versions not specified Description: The issue is related to a heap buffer overflow read. Technical details about the crash include the libssh2 kex agree instr and libssh2 packet add functions, as well as the fullpacket state...

FreeBSD : electron{26,27} -- multiple vulnerabilities (7015ab21-9230-490f-a2fe-f7557e3de25d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7015ab21-9230-490f-a2fe-f7557e3de25d advisory. - Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote...

CentOS 7 : thunderbird (RHSA-2023:5475)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:5475 advisory. - During the worker lifecycle, a use-after-free condition could have occured, which could have led to a potentially exploitable crash. This vulnerabili...