Ubuntu 16.04 ESM / 18.04 ESM : AFFLIB vulnerability (USN-6518-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6518-1 advisory. Luis Rocha discovered that AFFLIB incorrectly handled certain input files. If a user or automated system were tricked into processing a specially...

SUSE SLES12 Security Update : poppler (SUSE-SU-2023:4546-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4546-1 advisory. - CVE-2019-9545: Fixed a potential crash due to uncontrolled recursion in the JBIG parser bsc1128114. - CVE-2019-9631: Fixed an out...

SUSE-SU-2023:4557-1 Security update for vim

This update for vim fixes the following issues: Updated to version 9.0 with patch level 2103, fixes the following security problems CVE-2023-5344: vim: Heap-based Buffer Overflow in vim prior to 9.0.1969 bsc1215940 CVE-2023-5441: vim: segfault in exmode when redrawing bsc1216001 CVE-2023-5535: vi...

CVE-2023-5676

Eclipse OpenJ9 is vulnerable to a denial of service, caused by a flaw when a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause an infinite...

SUSE CVE-2023-5676

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing...

IBM Java 7.1 < 7.1.5.20 / 8.0 < 8.0.8.15

The version of IBM Java installed on the remote host is prior to 7.1 7.1.5.20 / 8.0 8.0.8.15. It is, therefore, affected by a vulnerability as referenced in the IBM Security Update November 2023 advisory. - In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang ...

Oracle Linux 9 : gdb (ELSA-2023-6372)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6372 advisory. 10.2.11.0.1 - Merge Oracle patches for ol9 Reviewed-by: Jose E. Marchesi 10.2-11.el9 - Backport 'libiberty: prevent buffer overflow when decoding user input' Lu...

Oracle Linux 9 : gmp (ELSA-2023-6661)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6661 advisory. 1:6.2.0-13 - Fix: previous commit removed one function from the library and thus broke the ABI - function gmpnpreinvdivrem1 should now not be removed Related:...

CVE-2023-5676

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing...

Design/Logic Flaw

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing...

CVE-2023-5676 Eclipse OpenJ9 possible infinite busy hang

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing...

CVE-2023-5676 Eclipse OpenJ9 possible infinite busy hang

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing...

kernel: Linux kernel: Local denial of service in skbuff due to improper network buffer handling

A flaw was found in the Linux kernel. A local user with low privileges could trigger a kernel bug by manipulating network packet buffer skbuff operations. Specifically, when a program uses a helper function to read data beyond the allocated buffer in certain Generic Segmentation Offload GSO...

ruby: Buffer overrun in String-to-Float conversion

A buffer overrun vulnerability was found in Ruby. The issue occurs in a conversion algorithm from a String to a Float that causes process termination due to a segmentation fault, but under limited circumstances. This flaw may cause an illegal memory read...

RHEL 8 : mod_auth_openidc:2.3 (RHSA-2023:6940)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6940 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an Open...

mariadb: server crash in st_select_lex_unit::exclude_level

MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component stselectlexunit::excludelevel...

mariadb: segmentation fault via the component sub_select

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect...

PT-2023-35572 · Git +1 · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash involves the functions flb sds cat safe, flb cf key translate, and...

Huawei EulerOS: Security Advisory for nasm (EulerOS-SA-2023-3223)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for nasm (EulerOS-SA-2023-3188)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...