Advancecomp v2.3 was discovered to contain a heap buffer overflow.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5838-1 advisory.

    It was discovered that AdvanceCOMP did not properly manage memory while performing read operations on MNG     file. If a user were tricked into opening a specially crafted MNG file, a remote attacker could possibly     use this issue to cause AdvanceCOMP to crash, resulting in a denial of service. (CVE-2022-35014,     CVE-2022-35017, CVE-2022-35018, CVE-2022-35019, CVE-2022-35020)

    It was discovered that AdvanceCOMP did not properly manage memory while performing read operations on ZIP     file. If a user were tricked into opening a specially crafted ZIP file, a remote attacker could possibly     use this issue to cause AdvanceCOMP to crash, resulting in a denial of service. (CVE-2022-35015,     CVE-2022-35016)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-99c00af79f advisory.

  - Advancecomp v2.3 contains a segmentation fault. (CVE-2022-35014)

  - Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.
    (CVE-2022-35015)

  - Advancecomp v2.3 was discovered to contain a heap buffer overflow. (CVE-2022-35016, CVE-2022-35017)

  - Advancecomp v2.3 was discovered to contain a segmentation fault. (CVE-2022-35018, CVE-2022-35019)

  - Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy     at /sanitizer_common/sanitizer_common_interceptors.inc. (CVE-2022-35020)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6225445e2b advisory.

  - Advancecomp v2.3 contains a segmentation fault. (CVE-2022-35014)

  - Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.
    (CVE-2022-35015)

  - Advancecomp v2.3 was discovered to contain a heap buffer overflow. (CVE-2022-35016, CVE-2022-35017)

  - Advancecomp v2.3 was discovered to contain a segmentation fault. (CVE-2022-35018, CVE-2022-35019)

  - Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy     at /sanitizer_common/sanitizer_common_interceptors.inc. (CVE-2022-35020)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b6a84729-6bd0-11ed-8d9a-b42e991fc52e advisory.

  - Advancecomp v2.3 contains a segmentation fault. (CVE-2022-35014)

  - Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.
    (CVE-2022-35015)

  - Advancecomp v2.3 was discovered to contain a heap buffer overflow. (CVE-2022-35016, CVE-2022-35017)

  - Advancecomp v2.3 was discovered to contain a segmentation fault. (CVE-2022-35018, CVE-2022-35019)

  - Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy     at /sanitizer_common/sanitizer_common_interceptors.inc. (CVE-2022-35020)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
170925	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : AdvanceCOMP vulnerabilities (USN-5838-1)	Nessus	Ubuntu Local Security Checks	medium
169246	Fedora 35 : advancecomp (2022-99c00af79f)	Nessus	Fedora Local Security Checks	medium
169182	Fedora 36 : advancecomp (2022-6225445e2b)	Nessus	Fedora Local Security Checks	medium
168187	FreeBSD : advancecomp -- Multiple vulnerabilities (b6a84729-6bd0-11ed-8d9a-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2022-35016

medium

Tenable Plugins

medium

medium

medium

medium