The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2647382c5f advisory.

  - An integer overflow vulnerability exists in the FST_BL_GEOM parsing maxhandle functionality of GTKWave     3.3.115, when compiled as a 32-bit binary. A specially crafted .fst file can lead to memory corruption. A     victim would need to open a malicious file to trigger this vulnerability. (CVE-2023-32650)

  - An improper array index validation vulnerability exists in the EVCD var len parsing functionality of     GTKWave 3.3.115. A specially crafted .evcd file can lead to arbitrary code execution. A victim would need     to open a malicious file to trigger this vulnerability. (CVE-2023-34087)

  - An out-of-bounds write vulnerability exists in the LXT2 num_time_table_entries functionality of GTKWave     3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open     a malicious file to trigger this vulnerability. (CVE-2023-34436)

  - An integer overflow vulnerability exists in the VZT longest_len value allocation functionality of GTKWave     3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a     malicious file to trigger this vulnerability. (CVE-2023-35004)

  - An integer overflow vulnerability exists in the LXT2 lxt2_rd_trace value elements allocation functionality     of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to     open a malicious file to trigger this vulnerability. (CVE-2023-35057)

  - An integer overflow vulnerability exists in the fstReaderIterBlocks2 time_table tsec_nitems functionality     of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to     open a malicious file to trigger this vulnerability. (CVE-2023-35128)

  - Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of     GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need     to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the     fstReaderVarint32 function. (CVE-2023-35702)

  - Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of     GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need     to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the     fstReaderVarint64 function. (CVE-2023-35703)

  - Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of     GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need     to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the     fstReaderVarint32WithSkip function. (CVE-2023-35704)

  - Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing     functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A     victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns     the decompression function `LZ4_decompress_safe_partial`. (CVE-2023-35955)

  - Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing     functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A     victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns     the decompression function `fastlz_decompress`. (CVE-2023-35956)

  - Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing     functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A     victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns     the decompression function `uncompress`. (CVE-2023-35957)

  - Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing     functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A     victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns     the copy function `fstFread`. (CVE-2023-35958)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c990070fa4 advisory.

  - An integer overflow vulnerability exists in the FST_BL_GEOM parsing maxhandle functionality of GTKWave     3.3.115, when compiled as a 32-bit binary. A specially crafted .fst file can lead to memory corruption. A     victim would need to open a malicious file to trigger this vulnerability. (CVE-2023-32650)

  - An improper array index validation vulnerability exists in the EVCD var len parsing functionality of     GTKWave 3.3.115. A specially crafted .evcd file can lead to arbitrary code execution. A victim would need     to open a malicious file to trigger this vulnerability. (CVE-2023-34087)

  - An out-of-bounds write vulnerability exists in the LXT2 num_time_table_entries functionality of GTKWave     3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open     a malicious file to trigger this vulnerability. (CVE-2023-34436)

  - An integer overflow vulnerability exists in the VZT longest_len value allocation functionality of GTKWave     3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a     malicious file to trigger this vulnerability. (CVE-2023-35004)

  - An integer overflow vulnerability exists in the LXT2 lxt2_rd_trace value elements allocation functionality     of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to     open a malicious file to trigger this vulnerability. (CVE-2023-35057)

  - An integer overflow vulnerability exists in the fstReaderIterBlocks2 time_table tsec_nitems functionality     of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to     open a malicious file to trigger this vulnerability. (CVE-2023-35128)

  - Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of     GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need     to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the     fstReaderVarint32 function. (CVE-2023-35702)

  - Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of     GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need     to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the     fstReaderVarint64 function. (CVE-2023-35703)

  - Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of     GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need     to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the     fstReaderVarint32WithSkip function. (CVE-2023-35704)

  - Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing     functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A     victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns     the decompression function `LZ4_decompress_safe_partial`. (CVE-2023-35955)

  - Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing     functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A     victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns     the decompression function `fastlz_decompress`. (CVE-2023-35956)

  - Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing     functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A     victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns     the decompression function `uncompress`. (CVE-2023-35957)

  - Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing     functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A     victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns     the copy function `fstFread`. (CVE-2023-35958)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
192900	Debian dsa-5653 : gtkwave - security update	Nessus	Debian Local Security Checks	4/3/2024	4/4/2024	high
193132	Debian dla-3785 : gtkwave - security update	Nessus	Debian Local Security Checks	4/10/2024	4/10/2024	high
189157	Fedora 39 : gtkwave (2024-2647382c5f)	Nessus	Fedora Local Security Checks	1/18/2024	1/18/2024	high
189158	Fedora 38 : gtkwave (2024-c990070fa4)	Nessus	Fedora Local Security Checks	1/18/2024	1/18/2024	high

Detections

Analytics

Plugins Search

high

high

high

high