20908 matches found
Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2022-2754)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
HTMLDOC 缓冲区错误漏洞
HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. A buffer error vulnerability exists in HTMLDOC versions prior to 1.9.15, which stems from a heap buffer overflow in the imagesetmask function, which can be exploited by an...
Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2022-2719)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : binutils (EulerOS-SA-2022-2754)
According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-n...
EulerOS 2.0 SP9 : binutils (EulerOS-SA-2022-2719)
According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-n...
MGASA-2022-0425 Updated binutils/gdb packages fix security vulnerability
libiberty: Heap/stack buffer overflow in the dlanglname function in d-demangle.c CVE-2021-3826 binutils: heap-based buffer overflow in bfdgetl32 when called by stripmain in objcopy.c via a crafted file CVE-2022-38533...
Updated chromium-browser-stable packages fix security vulnerabilities
The chromium-browser-stable package has been updated to the new 107 branch with the 107.0.5304.87 version, fixing many bugs and 15 vulnerabilities, together with 107.0.5304.68. Some of the security fixes are: High CVE-2022-3652: Type Confusion in V8. Reported by srodulv and ZNMchtss at S.S.L Team...
Updated binutils/gdb packages fix security vulnerability
libiberty: Heap/stack buffer overflow in the dlanglname function in d-demangle.c CVE-2021-3826 binutils: heap-based buffer overflow in bfdgetl32 when called by stripmain in objcopy.c via a crafted file CVE-2022-38533...
OSV-2022-1168 Heap-buffer-overflow in parse_subrip
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53210 Crash type: Heap-buffer-overflow WRITE Crash state: parsesubrip parsewebvtt gstsubparsechain...
OSV-2022-1165 Heap-buffer-overflow in parse_content_length
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53199 Crash type: Heap-buffer-overflow READ 1 Crash state: parsecontentlength gethdrfield parseheaders...
PT-2022-36766 · Git +1 · Gstreamer
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write crash. The crash involves the functions parse subrip, parse webvtt, and gst sub parse chain...
AlmaLinux 8 : freetype (ALSA-2022:7745)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:7745 advisory. - FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface. CVE-2022-27404 ...
OSV-2022-1164 Heap-buffer-overflow in virtio_net_queue_enable
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53186 Crash type: Heap-buffer-overflow READ 8 Crash state: virtionetqueueenable virtioqueueenable virtiopcicommonwrite...
Debian DSA-5275-1 : chromium - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5275 advisory. - Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...
Chromium: CVE-2022-3890 Heap buffer overflow in Crashpad
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
OSV-2022-1159 Heap-buffer-overflow in LibRaw_buffer_datastream::read
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53158 Crash type: Heap-buffer-overflow WRITE Crash state: LibRawbufferdatastream::read LibRaw::uncompressedfpdngloadraw LibRaw::unpack...
SUSE-SU-2022:3938-1 Security update for sudo
This update for sudo fixes the following issues: - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt password backend bsc1204986...
KLA20048 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Crashpad can be...
