Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service.The vulnerability exists due to the buffer over read in GFErr xtraboxread function in boxcodebase.c, which allows an attacker to crash the application by providing a malicious input...

CVE-2022-3178

Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV...

CVE-2022-3178

Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV...

CVE-2022-3178

The CVE-2022-3178 entry concerns a Buffer Over-read in GPAC (gpac/gpac) prior to 2.1.0-DEV. Affected component is the GPAC library; root cause is a buffer over-read in its code path. Impact is described as high confidentiality/integrity/availability concerns with local access and user interaction...

CVE-2022-3178

Removed by vendor...

CVE-2022-3178 Buffer Over-read in gpac/gpac

Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV...

CVE-2022-3178 Buffer Over-read in gpac/gpac

Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV...

Security advisory: zlib in Qt

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field and has been assigned the CVE id CVE-2022-37434. As this only affects applications that call inflateGetHeader directly then applications using Qt are not directly...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2022:3229-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3229-1 advisory. Updated to version 9.0 with patch level 0313: - CVE-2022-2183: Fixed out-of-bounds read through...

Heap overflow

cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...

CVE-2022-40320

cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...

CVE-2022-40320

cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...

CVE-2022-40320

CVE-2022-40320 affects libconfuse: cfg_tilde_expand in confuse.c of libConfuse 3.3 has a heap-based buffer over-read. Multiple advisories indicate affected packages and available patches (e.g., Mariner/SUSE/Amazon Linux advisories reference a patched version; Nessus entries note unpatched status ...

CVE-2022-40320

cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...

CVE-2022-40320

cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...

CVE-2022-40320

cfgtildeexpand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read...

Debian dla-3099 : qemu - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3099 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3099-1 [email protected]...

PT-2022-4809 · Unknown +2 · Libconfuse +2

Name of the Vulnerable Software and Affected Versions: libConfuse version 3.3 Description: The issue is related to a heap-based buffer over-read in the cfg tilde expand function of the libConfuse library. This can be exploited by a remote attacker using a specially crafted file, potentially leadi...

Buffer Over-read

vim/vim is vulnerable to . The vulnerability exists because of reading before the start of the line which allows an attacker to cause a memory corruption which then leads to an application crash...

Apache Geode versions deserialization of untrusted datawhen using JMX over RMI on Java 11

Apache Geode versions up to 1.12.2 and 1.13.2 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 11. Any user wishing to protect against deserialization attacks involving JMX or RMI should upgrade to Apache Geode 1.15. Use of 1.15 on Java 11 will...