Moderate: Red Hat Security Advisory: c-ares security update

An update for c-ares is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Moderate: Red Hat Security Advisory: cups security and bug fix update

An update for cups is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

cups: heap buffer overflow may lead to DoS

A flaw was found in the Cups package. A buffer overflow vulnerability in the |formatlogline| function could allow remote attackers to cause a denial of service. Exploitation is only possible when the configuration file, cupsd.conf, has the value of loglevel set to DEBUG...

OSV-2023-1161 Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64151 Crash type: Heap-buffer-overflow READ Crash state: std::1::basicstring, std::1::allocatorch Exiv2::QuickTimeVideo::NikonTagsDecoder Exiv2::QuickTimeVideo::userDataDecoder...

OSV-2023-1160 Heap-buffer-overflow in IEC104Stats::processPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64147 Crash type: Heap-buffer-overflow READ 1 Crash state: IEC104Stats::processPacket Flow::processIEC60870Packet NetworkInterface::processPacket...

Weston Embedded uC-HTTP HTTP Server Host header parsing memory corruption vulnerability

Talos Vulnerability Report TALOS-2023-1746 Weston Embedded uC-HTTP HTTP Server Host header parsing memory corruption vulnerability November 14, 2023 CVE Number CVE-2023-31247 SUMMARY A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded...

RHEL 8 : cups (RHSA-2023:7165)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7165 advisory. The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: cups...

openSUSE 15 Security Update : vlc (openSUSE-SU-2023:0365-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0365-1 advisory. - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: onl...

openSUSE 15 Security Update : vlc (openSUSE-SU-2023:0366-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0366-1 advisory. - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: onl...

Moderate: cups security and bug fix update

The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: cups: heap buffer overflow may lead to DoS CVE-2023-32324 cups: use-after-free in cupsdAcceptClient in scheduler/client.c CVE-2023-34241 For more details about t...

ALSA-2023:7207 Moderate: c-ares security update

The c-ares C library defines asynchronous DNS Domain Name System requests and provides name resolving API. Security Fixes: c-ares: Heap buffer over read in aresparsesoareply CVE-2020-22217 c-ares: Buffer Underwrite in aresinetnetpton CVE-2023-31130 For more details about the security issues,...

OSV-2023-1154 Heap-buffer-overflow in pcpp::SomeIpSdEntry::SomeIpSdEntry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64127 Crash type: Heap-buffer-overflow READ 4 Crash state: pcpp::SomeIpSdEntry::SomeIpSdEntry pcpp::SomeIpSdLayer::getEntries readParsedPacket...

OSV-2023-1150 Heap-buffer-overflow in pcpp::computeChecksum

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64122 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::computeChecksum pcpp::IPv4Layer::computeCalculateFields pcpp::Packet::computeCalculateFields...

OSV-2023-1149 Heap-buffer-overflow in bit_read_fixed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64118 Crash type: Heap-buffer-overflow READ 16 Crash state: bitreadfixed bitreadTF decodepreR13sentinel...

OSV-2023-1147 Heap-buffer-overflow in parse_by_block_type

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64114 Crash type: Heap-buffer-overflow READ Crash state: parsebyblocktype lightreadrecord lightgetnextpacket...

PT-2023-35579 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash has been reported. The crash occurs in the computeChecksum function, which is called by computeCalculateFields in the...

PT-2023-35581 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash occurred in the pcpp::SSLClientHelloMessage::getCipherSuite function, as reported by OSS-Fuzz. The crash was triggere...

PT-2023-35582 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash occurs in the pcpp::SomeIpSdEntry::SomeIpSdEntry and pcpp::SomeIpSdLayer::getEntries...

PT-2023-35577 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash occurs in the following functions: parse by block type, light read record, and light...

PT-2023-35578 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include a crash type of Heap-buffer-overflow READ 16, with the crash state...