CVE-2020-14311

There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow...

UBUNTU-CVE-2020-14311

There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow...

PT-2020-3623 · Gnu +7 · Grub2 +7

Name of the Vulnerable Software and Affected Versions: grub2 versions prior to 2.06 Description: The issue is related to a buffer overflow when handling symbolic links in ext filesystems. An arithmetic overflow occurs when a filesystem contains a symbolic link with an inode size of UINT32 MAX,...

CVE-2020-7820

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the arguments to the vulnerable API. This can be leveraged for code execution by rebooting the victim’s PC...

PT-2020-22409

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: asn1 get next, x509 parse ext certificate policies, and...

PT-2020-21826

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash state include the functions asn1 parse oid, asn1 get oid, and...

PT-2020-22035

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. Technical details include the involvement of specific functions such as tvb get ipv4 addr with...

libEMF Input Validation Error Vulnerability

libEMF is a library for generating enhanced metafiles. An input validation error vulnerability exists in the ScaleViewPortExtEx of the libemf.cpp file in libEMF version 1.0.12. An attacker can exploit this vulnerability to cause a denial of service with a specially crafted EMF file...

jackson-databind: arbitrary code execution in slf4j-ext class

A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using slf4j classes. An attacker could use this flaw to execute arbitrary code...

PT-2020-11514

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a missing bounds check in the phNxpNciHal write ext function of phNxpNciHal ext.cc, which could lead to a possible out of bounds write. This could result in local escalation of...

Open-Xchange: Null dereference in mcht_relational_validate ext-relational-common.c:136

To reproduce, run test suite on following input : require "vnd.dovecot.testsuite"; require "relational"; require "comparator-i;ascii-numeric"; require "body"; / / testset "message" text: From: Whomever To: Someone Date: Sat, 10 Oct 2009 00:30:04 +0200 Subject: whatever . ; / RFC5173, Section 5.2:...

Regular Expression Denial of Service (ReDoS)

Overview websocket-extensions is a Generic extension manager for WebSocket connections Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. The EXTLIST variable within extension parser may take quadratic time when parsing literal backslash \ followed by...

CVE-2020-13630

ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature...

CVE-2020-13632

ext/fts3/fts3snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo query...

CVE-2020-13630: Use After Free

ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature...

PT-2020-6896

Name of the Vulnerable Software and Affected Versions SQLite versions prior to 3.32.0 Description The issue is related to a use-after-free in the fts3EvalNextRow function of the ext/fts3/fts3.c component in SQLite, which can lead to memory corruption and potentially allow an attacker to execute...

PT-2020-3859

Name of the Vulnerable Software and Affected Versions: SQLite versions prior to 3.32.0 Description: The issue is related to a null pointer dereference in the ext/fts3/fts3 snippet.c component of the SQLite database management system. This can be exploited via a crafted matchinfo query, potentiall...

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2020-1542)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-20583

An issue was discovered on Samsung mobile devices with O8.x and P9.0 with TEEGRIS software. There is type confusion in the EXTFR Trustlet, leading to arbitrary code execution. The Samsung ID is SVE-2019-14847 August 2019...

PT-2020-10561

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x and P9.0 with TEEGRIS software Description The issue is related to type confusion in the EXT FR Trustlet, which can lead to arbitrary code execution. Recommendations For Samsung mobile devices with O8.x and P9....