OSV-2023-1140 Heap-buffer-overflow in H5MM_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64092 Crash type: Heap-buffer-overflow READ Crash state: H5MMstrdup H5Gstabgetnamebyidxcb H5Gnodebyidx...

cups security and bug fix update

1:2.3.3op2-21 - bump the spec because the previous build was made with buildroot 9.2 1:2.3.3op2-20 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation 1:2.3.3op2-19 - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient in scheduler/client.c - CVE-2023-32324 cups: heap...

Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2023-3186)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for LibRaw (EulerOS-SA-2023-3134)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OSV-2023-1126 Heap-buffer-overflow in iasecc_parse_acls

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63949 Crash type: Heap-buffer-overflow READ 1 Crash state: iaseccparseacls iaseccparsedocp iaseccsdoparsedata...

xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing f...

CVE-2023-5941

In versions of FreeBSD 12.4-RELEASE prior to 12.4-RELEASE-p7 and FreeBSD 13.2-RELEASE prior to 13.2-RELEASE-p5 the sflush stdio function in libc does not correctly update FILE objects' write space members for write-buffered streams when the write2 system call returns an error. Depending on the...

CVE-2023-5941

CVE-2023-5941 affects FreeBSD: libc stdio __sflush() may heap-buffer overflow on write(2) errors for line-buffered streams, impacting 12.4-RELEASE before 12.4-p7 and 13.2-RELEASE before 13.2-p5. Consequence is data corruption or arbitrary code execution at the attacker’s privileges depending on a...

DEBIAN-CVE-2023-47359

Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...

Rocky Linux 8 : openjpeg2 (RLSA-2021:4251)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4251 advisory. - Division-by-zero vulnerabilities in the functions pinextpcrl, pinextcprl, and pinextrpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote...

Rocky Linux 9 : lua (RLSA-2022:7329)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7329 advisory. - An issue in the component luaGrunerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs. CVE-2022-33099 Note that Nessus h...

Fedora 39 : firefox (2023-6bdc468df7)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-6bdc468df7 advisory. This update provides Firefox 117.0.1, with a significant security fix for CVE-2023-4863 and various bug fixes. Tenable has extracted the preceding...

Fedora 39 : libvpx (2023-10ff82e497)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-10ff82e497 advisory. Security fix for CVE-2023-5217 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 39 : libwebp (2023-f8319bd876)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-f8319bd876 advisory. Backport fix for CVE-2023-4863. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Moderate: cups security and bug fix update

The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: cups: heap buffer overflow may lead to DoS CVE-2023-32324 cups: use-after-free in cupsdAcceptClient in scheduler/client.c CVE-2023-34241 For more details about t...

Rocky Linux 8 : freetype (RLSA-2020:4952)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:4952 advisory. - Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

Fedora 39 : erofs-utils (2023-aadd651a30)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-aadd651a30 advisory. - Backports a fix for CVE-2023-33551 - Backports a fix for CVE-2023-33552 Tenable has extracted the preceding description block directly from the...

Fedora 39 : firefox (2023-bbb8d72c6f)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-bbb8d72c6f advisory. This update provides the latest release of Firefox, with an important security fix. We highly recommend you install this update immediately and...

SUSE SLES12 Security Update : tiff (SUSE-SU-2023:4371-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4371-1 advisory. - CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff bsc1213589. - CVE-2023-38288: Fixed an integer overflow in raw2tiff...

Fedora 39 : thunderbird (2023-1bcd79cdf6)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1bcd79cdf6 advisory. Update to 115.2.2 ; https://www.thunderbird.net/en-US/thunderbird/115.1.0/releasenotes/ ; https://www.thunderbird.net/en-US/thunderbird/115.1.1/releasenotes/...