Fedora 37 : libsignal-protocol-c (2023-6cfe134db6)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-6cfe134db6 advisory. Backport a fix for CVE-2022-48468 for protobuf-c, which is bundled in libsignal-protocol-c...

SUSE: Security Advisory (SUSE-SU-2023:1979-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : protobuf-c (SUSE-SU-2023:1979-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1979-1 advisory. - CVE-2022-48468: Fixed an unsigned integer overflow. bsc1210323 Tenable has extracted the preceding description block directly from the SUS...

SUSE-SU-2023:1979-1 Security update for protobuf-c

This update for protobuf-c fixes the following issues: - CVE-2022-48468: Fixed an unsigned integer overflow. bsc1210323...

CVE-2022-48468

A vulnerability was found in protobuf-c. This security flaw leads to an unsigned integer overflow in parserequiredmember...

UBUNTU-CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

Integer overflow

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

protobuf-c 输入验证错误漏洞

protobuf-c is a C-based protocol buffer implementation. A security vulnerability exists in protobuf-c versions prior to 1.4.1, which stems from the presence of an unsigned integer overflow...

CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

CVE-2022-48468

CVE-2022-48468 affects protobuf-c prior to v1.4.1, with an unsigned integer overflow in parse_required_member. Connected advisories confirm the issue across distributions (e.g., Astra Linux, AlmaLinux, Amazon Linux 2, and Mariner/CBL) and consistently cite protobuf-c before 1.4.1 as vulnerable. T...

SUSE CVE-2016-5355

wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service application crash via a crafted file...

SUSE CVE-2020-27768

In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0...

libtiff: uint32_t underflow leads to out of bounds read and write in tiffcrop.c

A flaw was found in libtiff's tiffcrop utility that has a uint32t underflow that can lead to an out-of-bounds read and write. This flaw allows an attacker who supplies a crafted file to tiffcrop likely via tricking a user to run tiffcrop on it with certain parametersto cause a crash or, in some...

SUSE-SU-2022:4259-1 Security update for tiff

This update for tiff fixes the following issues: - CVE-2022-3597: Fixed out-of-bounds write in TIFFmemcpy in libtiff/tifunix.c bnc1204641. - CVE-2022-3599: Fixed out-of-bounds read in writeSingleSection in tools/tiffcrop.c bnc1204643. - CVE-2022-3626: Fixed out-of-bounds write in TIFFmemset in...

SUSE-SU-2022:4248-1 Security update for tiff

This update for tiff fixes the following issues: - CVE-2022-3597: Fixed out-of-bounds write in TIFFmemcpy in libtiff/tifunix.c bnc1204641. - CVE-2022-3599: Fixed out-of-bounds read in writeSingleSection in tools/tiffcrop.c bnc1204643. - CVE-2022-3626: Fixed out-of-bounds write in TIFFmemset in...

NewStart CGSL MAIN 6.02 : binutils Multiple Vulnerabilities (NS-SA-2022-0087)

The remote NewStart CGSL host, running version MAIN 6.02, has binutils packages installed that are affected by multiple vulnerabilities: - An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control...

expat: integer overflow in the doProlog function

A flaw was found in expat. The vulnerability occurs due to large content in element type declarations when there is an element declaration handler present which leads to an integer overflow. This flaw allows an attacker to inject an unsigned integer, leading to a crash or a denial of service...

expat: integer overflow in the doProlog function

A flaw was found in expat. The vulnerability occurs due to large content in element type declarations when there is an element declaration handler present which leads to an integer overflow. This flaw allows an attacker to inject an unsigned integer, leading to a crash or a denial of service...

CVE-2022-30557

Foxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash because of Unsigned32 mishandling during JavaScript execution...

CVE-2021-43083

Apache PLC4X - PLC4C Only the C language implementation was effected was vulnerable to an unsigned integer underflow flaw inside the tcp transport. Users should update to 0.9.1, which addresses this issue. However, in order to exploit this vulnerability, a user would have to actively connect to a...