Linux Distros Unpatched Vulnerability : CVE-2017-10687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of servic...

Linux Distros Unpatched Vulnerability : CVE-2017-11704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a...

The vulnerability of the s32ton() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the s32ton function in the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2017-11734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2017-11729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1440 in util/decompile.c in Ming 0.4.8, which allows attackers...

Linux Distros Unpatched Vulnerability : CVE-2017-11730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1474 in util/decompile.c in Ming 0.4.8, which allows attackers...

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.

...

Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c

...

An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte).

...

An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.

...

Buffer overread when using an empty list with SSLContext.set_npn_protocols()

...

In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free when called from expand_one_smacro in asm/preproc.c.

...

Linux Distros Unpatched Vulnerability : CVE-2018-17235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The function mp4v2::impl::MP4Track::FinishSdtp in mp4track.cpp in libmp4v2 2.1.0 mishandles compatibleBrand while processing a crafted mp4 file, which leads to ...

Linux Distros Unpatched Vulnerability : CVE-2017-11728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function OpCode called from decompileSETMEMBER in util/decompile.c in Ming 0.4.8, which allows attackers to cause...

Linux Distros Unpatched Vulnerability : CVE-2017-11341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack. CVE-2017-11341 Note that...

libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.

...

Linux Distros Unpatched Vulnerability : CVE-2023-35862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcoap 4.3.1 contains a buffer over-read via the function coapparseoscoreconfmem at coaposcore.c. CVE-2023-35862 Note that Nessus relies on the presence of the...

Nginx 0.7.22 < 1.29.1 Buffer Over-read

According to its Server response header, the installed version of nginx is from 0.7.22 to 1.29.0. It is, therefore, affected by a buffer over-read vulnerability in the ngxmailsmtpmodule that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result...

Linux Distros Unpatched Vulnerability : CVE-2016-9827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service buffer over-read via a crafted SWF...

Linux Distros Unpatched Vulnerability : CVE-2017-11605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap based buffer over-read in LibSass 3.4.5, related to address 0xb4803ea1. A crafted input will lead to a remote denial of service attack...