Microsoft Windows Raw Image Extensions Library RCE (September 2022)

The Windows 'Raw Image Extensions' app installed on the remote host is affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 80900 C Tenable Network Security, Inc. The descriptive text an...

CVE-2022-38011: Undefined Security Weakness

Raw Image Extension Remote Code Execution Vulnerability...

PT-2022-5823 · Unknown · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to insufficient input validation in the Raw Image Extension plugin, which can be exploited to execute arbitrary code using a specially crafted file...

Libraw buffer error vulnerability

Libraw is a C++ library from Libraw Inc. for processing RAW CRW/CR2, NEF, RAF, DNG, andothers format images on various operating systems. A security vulnerability exists in Libraw, which is caused by an out-of-bounds write in the "newnode" function...

UBUNTU-CVE-2022-1354

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service...

kernel: information leak in scsi_ioctl()

A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege CAPSYSADMIN or CAPSYSRAWIO to create issues with confidentiality...

Ubuntu: Security Advisory (USN-4185-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2022-1660757175 Fixed 15 CVEs in expat

CVE-2022-25236: Fix insertion of namespace-separator characters into namespace URIs - CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to arbitrary code execution - CVE-2022-25315: Fix integer overflow in storeRawNames - CVE-2022-22822: Fix integer overflow in addBinding -...

kernel: information leak in scsi_ioctl()

A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege CAPSYSADMIN or CAPSYSRAWIO to create issues with confidentiality...

PT-2022-32659

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description A data-race issue exists around sysctl raw l3mdev accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.56, upda...

PT-2022-32833

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description A data-race issue exists around sysctl raw l3mdev accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.132,...

PT-2022-32960

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.207 Description A data-race issue exists around sysctl raw l3mdev accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.207, upda...

PT-2022-32440

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description A data-race issue exists around sysctl raw l3mdev accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.18.13, upda...

[SECURITY] Fedora 36 Update: golang-github-lunixbochs-vtclean-1.0.0-9.fc36

Clean up raw terminal output by stripping escape sequences, optionally preserving color...

[SECURITY] Fedora 36 Update: go-bindata-3.0.7-23.gita0ff256.fc36

A small utility which generates Go code from any file This tool converts any file into managable Go source code. Useful for embedding binary data into a go program. The file data is optionally gzip compressed before being converted to a raw byte slice...

PT-2022-37416

Name of the Vulnerable Software and Affected Versions pkcs11 affected versions not specified Description The pkcs11 interface has several safety issues, primarily related to the handling of raw pointers. These issues can lead to segmentation faults and undefined behavior when pointers are...

[SECURITY] Fedora 35 Update: golang-github-lunixbochs-vtclean-1.0.0-8.fc35

Clean up raw terminal output by stripping escape sequences, optionally preserving color...

[SECURITY] Fedora 35 Update: golang-github-vbatts-tar-split-0.11.1-10.fc35

Pristinely disassembling a tar archive, and stashing needed raw bytes and offsets to reassemble a validating original archive...

[SECURITY] Fedora 36 Update: golang-github-lunixbochs-vtclean-1.0.0-8.fc36

Clean up raw terminal output by stripping escape sequences, optionally preserving color...

[SECURITY] Fedora 36 Update: go-bindata-3.0.7-22.gita0ff256.fc36

A small utility which generates Go code from any file This tool converts any file into managable Go source code. Useful for embedding binary data into a go program. The file data is optionally gzip compressed before being converted to a raw byte slice...