8 matches found
EUVD-2025-5578
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-45778
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash. CVE-2024-4577...
CVE-2024-45778
CVE-2024-45778 affects grub2, caused by a stack overflow when reading a BFS filesystem. A crafted BFS image can trigger an uncontrolled loop and crash grub2, per the NVD entry. Likely impact is availability (HIGH), with local access required (attack vector LOCAL), low attack complexity and low pr...
Siemens SIMATIC S7-1500 TM MFP BIOS Out-of-bounds Write (CVE-2022-4378)
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system. This plugin only works with Tenable.ot. Please visit...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2023-12008)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12008 advisory. - proc: procskipspaces shouldn't think it is working on C strings Linus Torvalds Orabug: 34882779 CVE-2022-4378 - proc: avoid integer type confusi...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2023-12009)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12009 advisory. - proc: procskipspaces shouldn't think it is working on C strings Linus Torvalds Orabug: 34882779 CVE-2022-4378 - proc: avoid integer type confusi...
MGASA-2022-0062 Updated kernel packages fix security vulnerabilities
This kernel update is based on upstream 5.15.23 and fixes at least the following security issues: A stack overflow flaw was found in the Linux kernel TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64...
DEBIAN-CVE-2006-6235
A "stack overwrite" vulnerability in GnuPG gpg 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory...