20373 matches found
PT-2023-35812 · Hdf5 · Hdf5
Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow issue has been identified, which can cause a crash. The crash occurs due to a write operation in the heap buffer. Technical details about the issue include the involveme...
EulerOS Virtualization 3.0.2.0 : rsyslog (EulerOS-SA-2023-1692)
According to the versions of the rsyslog packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when...
EulerOS Virtualization 3.0.2.0 : binutils (EulerOS-SA-2023-1724)
According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain...
EulerOS Virtualization 3.0.2.0 : libtiff (EulerOS-SA-2023-1702)
According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in libtiff versions from...
OSV-2023-370 Heap-buffer-overflow in H5FS__sect_link
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58622 Crash type: Heap-buffer-overflow READ 8 Crash state: H5FSsectlink H5FSsectadd H5MFaddsect...
PT-2023-35809 · Hdf5 · Hdf5
Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash state indicates involvement of functions such as H5FS sect link, H5FS sect add, and H5MF add sect. Recommendations: At the...
Amazon Linux AMI : nasm (ALAS-2023-1737)
The version of nasm installed on the remote host is prior to 2.10.07-7.8. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1737 advisory. NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856 CVE-2022-44370 Tenable ha...
Important: nasm
Issue Overview: NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856 CVE-2022-44370 Affected Packages: nasm Issue Correction: Run yum update nasm or yum update --advisory ALAS-2023-1737 to update your system. New Packages: i686: ...
GLSA-202305-10 : Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202305-10 Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities - Use after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
GLSA-202305-16 : Vim, gVim: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202305-16 Vim, gVim: Multiple Vulnerabilities - Use after free in utfptr2char in GitHub repository vim/vim prior to 8.2.4646. CVE-2022-1154 - heap buffer overflow in getonesourceline in GitHub repository vim/vim prior to 8.2.4647...
OSV-2023-361 Heap-buffer-overflow in tok_get_normal_mode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58510 Crash type: Heap-buffer-overflow WRITE 1 Crash state: tokgetnormalmode PyTokenizerGet PyPegentokenizefullsourcetocheckforerrors...
Amazon Linux 2 : nasm (ALAS-2023-2029)
The version of nasm installed on the remote host is prior to 2.15.03-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2029 advisory. NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856 CVE-2022-44370 Tenable has...
PT-2023-35806 · Python · Python
Name of the Vulnerable Software and Affected Versions: Python affected versions not specified Description: The issue is related to a heap buffer overflow error. Technical details about the error include the crash type being a Heap-buffer-overflow WRITE 1. The crash state involves several function...
OSV-2023-359 Heap-buffer-overflow in H5MM_memcpy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58502 Crash type: Heap-buffer-overflow READ Crash state: H5MMmemcpy H5Ocachechkserialize H5Cgenerateimage...
OSV-2023-357 Heap-buffer-overflow in flac__analyze_frame
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58481 Crash type: Heap-buffer-overflow READ 4 Crash state: flacanalyzeframe writecallback writeaudioframetoclient...
PT-2023-35803 · Git +1 · Flac
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow READ 4 crash type. The crash state involves the flac analyze frame, write callback, and write audio frame ...
OSV-2023-356 Heap-buffer-overflow in pdf_nextobject
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58475 Crash type: Heap-buffer-overflow READ 1 Crash state: pdfnextobject findlength pdfextractobj...
PT-2023-35802 · Git +1 · Clamav
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash involves the functions pdf nextobject, find length, and pdf...
Denial Of Services (DoS)
Google Chrome is vulnerable to Denial Of Services DoS. The vulnerability exists due to the heap buffer overflow in sqlite, which allows an attacker to potentially exploit heap corruption via a crafted HTML page...
