12915 matches found
Design/Logic Flaw
In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...
CVE-2023-24056
In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...
CVE-2023-24056
In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...
CVE-2023-24056
CVE-2023-24056 affects pkgconf up to 1.9.3. The issue is a root cause in libpkgconf/tuple.c:pkgconf_tuple_parse where variable duplication can cause unbounded string expansion (e.g., a small .pc expanded to billions of bytes), leading to memory/resource exhaustion. IBM bulletins for Cloud Pak pro...
CVE-2023-24056
In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...
CVE-2023-24056
In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconftupleparse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes...
SWC-109 Uninitialized Storage Pointer
Lines of code Vulnerability details Impact Uninitialized storage variables can point to unexpected storage locations. Proof of Concept // Exploitable Vulnerability MemoryPointer callData; Tools Used github Recommended Mitigation Steps // Initialize variable "callData" or set the storage attribute...
Reentrancy Vulnerability in _performFinalChecksAndExecuteOrders function
Lines of code Vulnerability details Impact bytes memory accumulator = new bytesAccumulatorDisarmed; and transferitem, execution.offerer, execution.conduitKey, accumulator; The code uses an "accumulator" variable that is used in the transfer function. The accumulator is created using the line byte...
PT-2023-2539
Name of the Vulnerable Software and Affected Versions pkgconf versions 1.9.3 and earlier Description The issue is related to the pkgconf tuple parse function in libpkgconf/tuple.c, which can cause an unbounded string expansion due to incorrect checks. This can lead to a denial of service when a...
CVE-2022-47012
Use of uninitialized variable in function genethrecv in GNS3 dynamips 0.2.21...
Design/Logic Flaw
Use of uninitialized variable in function genethrecv in GNS3 dynamips 0.2.21...
CVE-2022-47012
Use of uninitialized variable in function genethrecv in GNS3 dynamips 0.2.21...
PT-2023-9444
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a null pointer dereference in the gsmi component of the Linux kernel. This can be triggered by a new get variable call with attr=NULL, which was introduced by a...
CVE-2022-47012
Use of uninitialized variable in function genethrecv in GNS3 dynamips 0.2.21...
CVE-2022-47012: Use of Uninitialized Resource
Use of uninitialized variable in function genethrecv in GNS3 dynamips 0.2.21...
PT-2023-15132 · Unknown +1 · Gns3 Dynamips +1
Name of the Vulnerable Software and Affected Versions: GNS3 dynamips version 0.2.21 Description: The issue is related to the use of an uninitialized variable in the function gen eth recv in GNS3 dynamips. This could potentially lead to unpredictable behavior or errors. Recommendations: For GNS3...
CVE-2022-47012
Use of uninitialized variable in function genethrecv in GNS3 dynamips 0.2.21...
CVE-2022-47012
Use of uninitialized variable in function genethrecv in GNS3 dynamips 0.2.21...
CVE-2022-47012
CVE-2022-47012 concerns GNS3 dynamips 0.2.21 with an uninitialized variable in the function gen_eth_recv. The vulnerability affects the dynamips component (gen_eth_recv) and enables network-exposed impact with availability impact listed as HIGH; no official patch/version fix is provided in the do...