Important: git security update

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to wo...

The Algorithms security breach

The Algorithms is a library of The Algorithms open source. It is a collection of open source implementations of various algorithms. A security vulnerability exists in The Algorithms that stems from the presence of a deeply recursive segmentation error...

GHSA-67FV-9R7G-432H Rhai stack overflow vulenrability

A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: / SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : $LT $impl $u20 $rhai.. engine.. Engine$GT$::evalstmt::h3f1d68ce37fc6e96. Due to the stack overflow is a recursive call/SRC/rhai/SRC/eval/STMT. Rs file...

CVE-2024-36760

A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: / SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : $LT $impl $u20 $rhai.. engine.. Engine$GT$::evalstmt::h3f1d68ce37fc6e96. Due to the stack overflow is a recursive call/SRC/rhai/SRC/eval/STMT. Rs file...

CVE-2024-36760

A stack overflow vulnerability exists in rhai version 1.18.0 . The root cause is a recursive call within the eval_stmt_block function located in the SRC/rhai/SRC/eval/STMT.rs file. This flaw can lead to high availability impact, as indicated by the CVSS 3.1 score of 7.5. As a temporary workaround...

CVE-2024-36760: Buffer Copy without Checking Size of Input

A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: / SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : $LT $impl $u20 $rhai.. engine.. Engine$GT$::evalstmt::h3f1d68ce37fc6e96. Due to the stack overflow is a recursive call/SRC/rhai/SRC/eval/STMT. Rs file...

CVE-2024-36760

A stack overflow vulnerability was found in version 1.18.0 of rhai. The flaw position is: / SRC/rhai/SRC/eval/STMT. Rs in rhai: : eval: : STMT: : $LT $impl $u20 $rhai.. engine.. Engine$GT$::evalstmt::h3f1d68ce37fc6e96. Due to the stack overflow is a recursive call/SRC/rhai/SRC/eval/STMT. Rs file...

CVE-2022-28652: Improper Restriction of Recursive Entity References in DTDs

/.config/apport/settings parsing is vulnerable to "billion laughs" attack...

The vulnerability of the libexpat XML file analysis library lies in the improper restriction on recursive references to objects in DTDs, which allows attackers to trigger a service failure.

The vulnerability of the libexpat library for analyzing XML files is related to improper restrictions on recursive references to objects in DTDs. Exploiting this vulnerability could allow an attacker to cause a service failure...

RHEL 6 : graphviz (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - graphviz: stack-based buffer overflow in chkNum CVE-2014-1236 - graphviz: recursive function call in...

RHEL 7 : git (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - git: Recursive submodule cloning allows using git directory twice with synonymous directory name written ...

EulerOS 2.0 SP11 : bind (EulerOS-SA-2024-1783)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : To keep its cache database efficient, named running as a recursive resolver occasionally attempts to clean up the database. It uses several methods,...

RHEL 8 : hivex (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - hivex: stack overflow due to recursive call of getchildren CVE-2021-3622 Note that Nessus has not tested for this...

RHEL 5 : elfutils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - elfutils: directory traversal in readlongnames CVE-2014-9447 - elfutils: eu-size cannot handle recursive ...

CVE-2024-36947

In the Linux kernel, the following vulnerability has been resolved: qibfs: fix dentry leak simplerecursiveremoval drops the pinning references to all positives in subtree. For the cases when its argument has been kept alive by the pinning alone that's exactly the right thing to do, but here the...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2024-1712)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2024-1736)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP12 : bind (EulerOS-SA-2024-1736)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw in query-handling code can cause named to exit prematurely with an assertion failure when: - nxdomain-redirect domain; is configured, and - t...

Ubuntu: Security Advisory (USN-6795-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.11.0 : bind (EulerOS-SA-2024-1723)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : To keep its cache database efficient, named running as a recursive resolver occasionally attempts to clean up the database. It uses...