Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : GNU binutils vulnerability (USN-5762-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5762-1 advisory. It was discovered that GNU binutils incorrectly handled certain COFF files. An attacker could possibly use this issue to cause...

Updated imagemagick packages fix security vulnerability

A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks. CVE-2021-3574 A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows a...

OSV-2022-1246 Heap-buffer-overflow in AffixMgr::cpdpat_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54030 Crash type: Heap-buffer-overflow READ 1 Crash state: AffixMgr::cpdpatcheck AffixMgr::compoundcheck AffixMgr::compoundcheck...

PT-2022-36804 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the AffixMgr class, specifically the cpdpat check and compound check functions...

OSV-2022-1242 Heap-buffer-overflow in ZSTD_createDDict

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54015 Crash type: Heap-buffer-overflow READ Crash state: ZSTDcreateDDict bloscrundecompressionwithcontext blosc2decompressctx...

PT-2022-36803 · Git +1 · C-Blosc2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ crash has been reported, involving the ZSTD createDDict, blosc run decompression with context, and blosc2 decompress ctx...

Heap Buffer Overflow

bash is vulnerable to a heap buffer overflow. The vulnerability exists in validparametertransform function of subst.c which allows an attacker to crash the system through potentially exploit heap corruption via a malicious HTML page...

OSV-2022-1235 Heap-buffer-overflow in _rrparse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53939 Crash type: Heap-buffer-overflow READ 16 Crash state: rrparse messageparse fuzzmdnsmessage.cc...

PT-2022-36802 · Git +1 · Open62541

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the crash type being a Heap-buffer-overflow READ 16,...

PT-2022-36799 · Git +1 · Relic

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE crash has been reported, involving functions such as dv copy, bn lsh, and cryptofuzz::module::relic bignum::LShift1::Run...

ALPINE-CVE-2022-3520

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765...

Autodesk AutoCAD Multiple Vulnerabilities (adsk-sa-2022-0021)

The version of Autodesk AutoCAD installed on the remote Windows host is a version prior to 2020.1.6, 2021.1.3, 2022.1.3 or 2023.1.1. It is, therefore, affected by multiple vulnerabilities. - A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023,...

Heap Buffer Overflow

Chromium and Electron are vulnerable to a Heap Buffer Overflow. The vulnerability is caused by an out of bounds heap memory write which can result in an application crash...

CVE-2022-45332

LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decodepreR13sectionhdr at decoder11.c...

Heap overflow

LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decodepreR13sectionhdr at decoder11.c...

CVE-2022-45332

CVE-2022-45332 affects LibreDWG v0.12.4.4643, with a heap buffer overflow in the decode_preR13_section_hdr function of decode_r11.c. The vulnerability is described as a heap overflow (high impact) with LOCAL attack vector, no privileges required, and user interaction needed. The connected documen...

CVE-2022-45332

LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decodepreR13sectionhdr at decoder11.c...

SUSE SLES12: binutils / binutils-devel / binutils-gold / cross-ppc-binutils / etc (SUSE-SU-2022:4277-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4277-1 advisory. The following security bugs were fixed: - CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcppfile.h bsc1142579. -...

SUSE-SU-2022:4280-1 Security update for sudo

This update for sudo fixes the following issues: Security fixes: - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt password backend bsc1204986. Other: - Make sure SIGCHLD is not ignored when sudo is executed;...

Actively Exploited Zero-Day Bug in Chrome

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary CVE-2022-4135 is a high-severity heap buffer overflow issue that affects the GPU component. The fault is caused by a boundary error in the GPU while processing untrusted HTML input. An attacker wh...