Linux Distros Unpatched Vulnerability : CVE-2022-35107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SWFTools commit 772e55a2 was discovered to contain a stack overflow via vfprintf at /stdio- common/vfprintf.c. CVE-2022-35107 Note that Nessus relies on the...

CVE-2022-35107

SWFTools commit 772e55a2 was discovered to contain a stack overflow via vfprintf at /stdio-common/vfprintf.c...

CVE-2022-35107: Allocation of Resources Without Limits or Throttling

SWFTools commit 772e55a2 was discovered to contain a stack overflow via vfprintf at /stdio-common/vfprintf.c...

PT-2022-22574

Name of the Vulnerable Software and Affected Versions SWFTools affected versions not specified Description A stack overflow issue was discovered in SWFTools via vfprintf at /stdio-common/vfprintf.c. Recommendations At the moment, there is no information about a newer version that contains a fix f...

SWFTools security vulnerabilities

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools, which stems from a stack overflow in vfprintf in the /stdio-common/vfprintf.c file...

GNU glibc 'stdio-common/vfscanf.c' local denial of service vulnerability

GNU glibc also known as GNU C Library, libc6 is an open-source, free C compiler released under the LGPL license. A local denial of service vulnerability exists in GNU glibc. An attacker could exploit this vulnerability to crash an application, causing a denial of service...

PT-2015-5310

Name of the Vulnerable Software and Affected Versions GNU C Library versions prior to 2.21 Description The issue is related to the ADDW macro in stdio-common/vfscanf.c, which does not properly consider data-type size during a risk-management decision for use of the alloca function. This might all...

CVE-2012-3404

CVE-2012-3404 affects the GNU C Library (glibc) in the vfprintf path (stdio-common/vfprintf.c). The issue is a miscalculation of buffer length that can bypass Fortify_SOURCE format-string protections when using positional parameters with many specifiers, enabling context-dependent DoS via a craft...