9379 matches found
glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding
A flaw was found in glibc. When processing input in the EUC-KR encoding, an invalid input sequence could cause glibc to read beyond the end of a buffer, resulting in a segmentation fault. The highest threat from this vulnerability is to system availability...
CentOS 8 : liblouis (CESA-2020:1708)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1708 advisory. - liblouis: Segmentation fault in logging.c:loulogPrint CVE-2018-11577 - liblouis: Stack-based buffer overflow in function includeFile in...
EulerOS 2.0 SP8 : lua (EulerOS-SA-2021-1154)
According to the version of the lua packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31.CVE-2020-24370 Not...
CentOS 8 : qt5-qtbase (CESA-2019:3390)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3390 advisory. - qt5-qtbase: Double free in QXmlStreamReader CVE-2018-15518 - qt5-qtbase: QImage allocation failure in qgifhandler CVE-2018-19870 - qt5-qtbase:...
CentOS 8 : nss and nspr (CESA-2019:1951)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1951 advisory. - nss: NULL pointer dereference in several CMS functions resulting in a denial of service CVE-2018-18508 - nss: Out-of-bounds read when importing...
CentOS 8 : elfutils (CESA-2019:3575)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3575 advisory. - elfutils: buffer over-read in the eblobjectnote function in eblobjnote.c in libebl CVE-2019-7146 - elfutils: heap-based buffer over-read in...
Micrium uC-HTTP HTTP Server unchecked return value denial-of-service vulnerability
Summary A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Micrium uC-HTTP 3.01.00 Product URLs...
Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2021-1046)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-25013
A flaw was found in glibc. When processing input in the EUC-KR encoding, an invalid input sequence could cause glibc to read beyond the end of a buffer, resulting in a segmentation fault. The highest threat from this vulnerability is to system availability...
Genivia gSOAP WS-Addressing plugin denial-of-service vulnerability
Summary A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Genivia gSOAP 2.8.107 Product UR...
EulerOS Virtualization for ARM 64 3.0.2.0 : qemu-kvm (EulerOS-SA-2021-1046)
According to the versions of the qemu-kvm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in...
[SECURITY] [DSA 4809-2] python-apt regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-4809-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 27, 2020 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4809-2] python-apt regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-4809-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 27, 2020 https://www.debian.org/security/faq -...
[SECURITY] [DLA 2488-2] python-apt regression update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2488-2 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 26, 2020 https://wiki.debian.org/LTS -...
CVE-2020-35716
Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to cause a persistent denial of service segmentation fault via a long /goform/langSwitch langSelectionOnly parameter...
MGASA-2020-0459 Updated sam2p package fixes security vulnerabilities
In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file inpcx.cpp. CVE-2017-14628. In sam2p 0.49.3, the inxpmreader function in inxpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element. CVE-2017-14629. In...
Updated sam2p package fixes security vulnerabilities
In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file inpcx.cpp. CVE-2017-14628. In sam2p 0.49.3, the inxpmreader function in inxpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element. CVE-2017-14629. In...
Moderate: Red Hat Security Advisory: curl security and bug fix update
An update for curl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
