Amazon Linux AMI : ImageMagick (ALAS-2024-1926)

The version of ImageMagick installed on the remote host is prior to 6.9.10.68-3.22. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1926 advisory. Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial...

Security Bulletin: IBM Informix archecker, cdr, and onsmsync are vulnerable to heap buffer overflow.

Summary IBM Informix archecker, cdr, and onsmsync are vulnerable to heap buffer overflow when invoked with invalid parameters. Vulnerability Details CVEID:CVE-2023-28527 DESCRIPTION: IBM Informix cdr is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a...

PT-2024-10423

Name of the Vulnerable Software and Affected Versions DCMTK versions prior to 3.6.9 Description The issue is related to a segmentation fault in the dcmdata component of the DCMTK library, which can be triggered by an invalid DIMSE message. This can potentially allow a remote attacker to cause a...

PT-2024-25941

Name of the Vulnerable Software and Affected Versions DCMTK versions prior to 3.6.9 Description The issue is related to a segmentation fault in dcmnet, a component of DCMTK, which occurs when an invalid DIMSE message is received. Recommendations For versions prior to 3.6.9, update to version 3.6....

Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2024-1320)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2024-1342)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ansys-magnet-segmentation-toolkit (>=0.3.2, <=0.3.3), aprsd (>=3.2.0, <=3.2.2) +21 more potentially affected by CVE-2024-27758 via rpyc (5.3.1)

rpyc PYPI version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on rpyc and may be impacted: - ansys-magnet-segmentation-toolkit =0.3.2, =3.2.0, =0.0.25, =7.0.0, =1.0.0, =1.4.1, =0.0.0, =3.5.30, =0.4.2, =0.1.0, =0.6.0, =0.6.72, =0.8.1 and more...

EulerOS 2.0 SP8 : giflib (EulerOS-SA-2024-1267)

According to the versions of the giflib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c. CVE-2023-39742 Note that Tenable Network Security has...

EulerOS 2.0 SP10 : ncurses (EulerOS-SA-2024-1342)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Note that Tenable Network...

EulerOS 2.0 SP11 : ncurses (EulerOS-SA-2024-1240)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Note that Tenable Network...

EulerOS 2.0 SP10 : ncurses (EulerOS-SA-2024-1320)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Note that Tenable Network...

EulerOS 2.0 SP11 : ncurses (EulerOS-SA-2024-1218)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry. CVE-2023-50495 Note that Tenable Network...

Huawei EulerOS: Security Advisory for giflib (EulerOS-SA-2024-1267)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2024-1218)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2024-1710184311 freetype: Fix of 3 CVEs

CVE-2022-27404: Fix buffer overflow in sfntinitface - CVE-2022-27405: Fix segmentation violation via FNTSizeRequest - CVE-2022-27406: Fix segmentation violation via FTRequestSize...

libucl:ucl_add_string_fuzzer: Segv on unknown address in kh_get_ucl_hash_caseless_node

Detailed Report: https://oss-fuzz.com/testcase?key=6029976795152384 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerasanlibucl Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: khgetuclhashcaselessnode uclhashsearch...

SWFTools swfc.c Denial of Service Vulnerability

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A denial of service vulnerability exists in SWFTools version v0.9.2, which originates from a function sfont in the file swftools/src/swfc.c that contains a segmentation conflict. An attacker can exploit this vulnerabilit...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : ncurses vulnerability (USN-6684-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6684-1 advisory. It was discovered that ncurses incorrectly handled certain function return values, possibly leading to segmentation fault. A local attacke...

SWFTools swfshape.c Denial of Service Vulnerability

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A denial of service vulnerability exists in SWFTools version v0.9.2, which originates from a function freelines in the file swftools/lib/modules/swfshape.c that contains a segmentation conflict. An attacker can exploit...

SWFTools actioncompiler.c Denial of Service Vulnerability

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A denial of service vulnerability exists in SWFTools version v0.9.2, which originates from the function compileSWFActionCode in the file swftools/lib/action/actioncompiler.c containing a segmentation conflict. An attacke...