An out-of-bounds write vulnerability exists in the LXT2 num_time_table_entries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c990070fa4 advisory.

    Cumulative bug-fix update.

    This update includes fixes for multiple security issues found by Talos in which specially crafted input     files could lead to arbitrary code execution. A victim would need to open a malicious file to trigger     these vulnerabilities.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2647382c5f advisory.

    Cumulative bug-fix update.

    This update includes fixes for multiple security issues found by Talos in which specially crafted input     files could lead to arbitrary code execution. A victim would need to open a malicious file to trigger     these vulnerabilities.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
193132	Debian dla-3785 : gtkwave - security update	Nessus	Debian Local Security Checks	high
192900	Debian dsa-5653 : gtkwave - security update	Nessus	Debian Local Security Checks	high
189158	Fedora 38 : gtkwave (2024-c990070fa4)	Nessus	Fedora Local Security Checks	high
189157	Fedora 39 : gtkwave (2024-2647382c5f)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2023-34436

high

Tenable Plugins

high

high

high

high