CVE-2022-24140

IOBit Advanced System Care 15, iTop Screen Recorder 2.1, iTop VPN 3.2, Driver Booster 9, and iTop Screenshot sends HTTP requests in their update procedure in order to download a config file. After downloading the config file, the products will parse the HTTP location of the update from the file a...

Fedora: Security Advisory for dnscrypt-proxy (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-2301

Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3...

DEBIAN-CVE-2022-2301

Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3...

CVE-2022-2301

Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3...

CVE-2022-2301 Buffer Over-read in hpjansson/chafa

Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3...

CVE-2022-2301

Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3...

CVE-2022-2301

CVE-2022-2301 affects the chafa project (hpjansson/chafa) prior to 1.10.3. Root cause: a Buffer Over-read in the library. Impact per sources includes availability disruption. Remediation: upgrade to version 1.10.3 or apply vendor patches (openSUSE/SUSE advisories note the fix). If exploiting deta...

CVE-2022-2301 Buffer Over-read in hpjansson/chafa

Buffer Over-read in GitHub repository hpjansson/chafa prior to 1.10.3...

Oracle Linux 8 : kernel (ELSA-2022-5316)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5316 advisory. - debug: lockdown kgdb Orabug: 34270802 CVE-2022-21499 - esp: limit skbpagefragrefill use to a single page Sabrina Dubroca 2062114 CVE-2022-27666 - esp...

RHEL 8 : vim (RHSA-2022:5319)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5319 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: heap buffer overflow CVE-2022-1621 vim: buffer...

Oracle Linux 8 : ruby:2.6 (ELSA-2022-5338)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-5338 advisory. - Fix buffer overrun in String-to-Float conversion. Resolves: CVE-2022-28739 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 8 : vim (ELSA-2022-5319)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5319 advisory. - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read - CVE-2022-1154 vim: use after free in utfptr2char - CVE-2022-0361 vim:...

vim: buffer over-read in function find_next_quote

A flaw was found in vim, where it is vulnerable to a buffer over-read in the findnextquote function. This flaw allows a specially crafted file to crash software, modify memory and possibly perform remote execution when opened in vim...

Moderate: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Buffer Over-read in vim/vim

...

openSUSE 15 Security Update : dbus-broker (openSUSE-SU-2022:10030-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10030-1 advisory. - An issue was discovered in dbus-broker before 31. Multiple NULL pointer dereferences can be found when supplying a malformed XML config...

Moderate: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: heap buffer overflow CVE-2022-1621 vim: buffer over-read CVE-2022-1629 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to...

ALSA-2022:5319 Moderate: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: heap buffer overflow CVE-2022-1621 vim: buffer over-read CVE-2022-1629 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to...

Ubuntu 16.04 ESM : Vim vulnerabilities (USN-5498-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5498-1 advisory. It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file...