20829 matches found
Amazon Linux 2 : freetype (ALAS-2023-1909)
The version of freetype installed on the remote host is prior to 2.8-14. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1909 advisory. A heap buffer overflow flaw was found in Freetype's sfntinitface function in the sfobjs.c file. The vulnerability occurs...
Moderate: bash security update
The bash packages provide Bash Bourne-again shell, which is the default shell for AlmaLinux. Security Fixes: bash: a heap-buffer-overflow in validparametertransform CVE-2022-3715 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
PT-2023-35754 · Git +1 · Readstat
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the functions sas read2, sas7bcat parse block, and...
RHEL 7 : qemu-kvm-rhev bug fix update (Important) (RHSA-2020:2342)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2342 advisory. - QEMU: slirp: heap buffer overflow during packet reassembly CVE-2019-14378 - QEMU: slirp: OOB buffer access while emulating tcp protocols i...
PT-2023-1010
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 116.0.5845.187 libwebp versions prior to 1.3.2 Firefox versions prior to 117.0.1+build2-0ubuntu0.20.04.1 Description A heap-based buffer overflow exists in the libwebp library used for encoding and decoding WebP...
ALSA-2023:0340 Moderate: bash security update
The bash packages provide Bash Bourne-again shell, which is the default shell for AlmaLinux. Security Fixes: bash: a heap-buffer-overflow in validparametertransform CVE-2022-3715 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
heap-buffer-overflow in function utfc_ptr2len
Description Heap-based Buffer Overflow in function utfcptr2len at mbyte.c:2145 Vim Version git log commit ebfec1c531f32d424bb2aca6e7391ef3bfcbfe20 HEAD - master, tag: v9.0.1234, origin/master, origin/HEAD Both POCs also apply to v9.0.1262: git log commit f2e30d0c448b9754d0d4daa901b51fbbf4c30747...
[SECURITY] [DLA 3278-1] tiff security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3278-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler January 20, 2023 https://wiki.debian.org/LTS -...
afterglow (>=0.1.0, <=0.3.0), aiid_js (0.0.1) +76 more potentially affected by unknown CVE via bumpalo (>=2.6.0, <=3.6.1)
bumpalo CARGO version =2.6.0, =0.1.0, =0.5.4-rc.1, =0.1.0, =0.1.3, =3.0.0, =4.0.2, =0.114.0, =0.114.0, =0.1.0, =0.1.0, =0.1.1, =0.1.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F85W-WVC7-CRWC...
OSV-2023-19 Heap-buffer-overflow in ndpi_search_bittorrent
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55218 Crash type: Heap-buffer-overflow READ Crash state: ndpisearchbittorrent checkndpidetectionfunc ndpicheckflowfunc...
Medium: freetype
Issue Overview: A heap buffer overflow flaw was found in Freetype's sfntinitface function in the sfobjs.c file. The vulnerability occurs when creating a face with a strange file and invalid index. This flaw allows an attacker to read and modify a small amount of memory, causing the application to...
wolfSSL WOLFSSL_CALLBACKS Heap Buffer Over-Read
wolfSSL before 5.5.2: Heap-buffer over-read with WOLFSSLCALLBACKS ==================================================================== INFO ======= The CVE project has assigned the id CVE-2022-42905 to this issue. Severity: 9.1 CRITICAL Affected version: before 5.5.2 End of embargo: Ended October...
PT-2023-35707 · Git +1 · Ndpi
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ crash occurred, as reported by OSS-Fuzz. The crash involves the functions ndpi search bittorrent, check ndpi detection func,...
openSUSE 15: GraphicsMagick / GraphicsMagick-devel / libGraphicsMagick++-Q16-12 / etc (SUSE-SU-2022:1274-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:1274-1 advisory. - CVE-2022-1270: Fixed a heap buffer overflow when parsing MIFF bsc1198351. Tenable has extracted the preceding description block directly from the SUSE...
OSV-2023-16 Heap-buffer-overflow in wc_AesFeedbackEncrypt
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55174 Crash type: Heap-buffer-overflow WRITE 1 Crash state: wcAesFeedbackEncrypt wcAesOfbEncrypt evpCipherBlock...
OSV-2023-13 Heap-buffer-overflow in wc_AesCbcEncrypt
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55161 Crash type: Heap-buffer-overflow WRITE 16 Crash state: wcAesCbcEncrypt evpCipherBlock wolfSSLEVPCipherUpdate...
heap-buffer-overflow in same_leader and utfc_ptr2len
Description Heap-based Buffer Overflow in function sameleader at textformat.c:558 Heap-based Buffer Overflow in function utfcptr2len at mbyte.c:2138 Vim Version git log commit f97a295ccaa9803367f3714cdefce4e2283c771d HEAD - master, tag: v9.0.1221, origin/master, origin/HEAD Able to replicate the...
OSV-2023-11 Heap-buffer-overflow in node_from_openstep
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55146 Crash type: Heap-buffer-overflow READ 1 Crash state: nodefromopenstep nodefromopenstep plistfromopenstep...
PT-2023-35559 · Git +1 · Libplist
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions node from openstep, plist from openstep. No information is provid...