Lucene search
+L

4300 matches found

osv_debian
osv_debian
•added 2022/03/14 11:15 p.m.•6 views

DEBIAN-CVE-2021-42388

Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl loop, a 16-bit unsigned user-supplied value 'offset' is read from the compressed data. The offset is later used in the length of a copy operation, without checking the...

8.1CVSS8AI score0.01573EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/03/14 11:15 p.m.•18 views

UBUNTU-CVE-2021-42388

Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl loop, a 16-bit unsigned user-supplied value 'offset' is read from the compressed data. The offset is later used in the length of a copy operation, without checking the...

8.1CVSS5.8AI score0.01573EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/14 12:00 a.m.•8 views

CVE-2021-42387: Out-of-bounds Read

Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl loop, a 16-bit unsigned user-supplied value 'offset' is read from the compressed data. The offset is later used in the length of a copy operation, without checking the...

8.1CVSS7.7AI score0.01573EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/14 12:00 a.m.•9 views

CVE-2021-42388: Out-of-bounds Read

Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl loop, a 16-bit unsigned user-supplied value 'offset' is read from the compressed data. The offset is later used in the length of a copy operation, without checking the...

8.1CVSS7.7AI score0.01573EPSS
SaveExploits1References3
Veracode
Veracode
•added 2022/03/13 6:00 a.m.•46 views

Denial Of Service (DoS)

vim is vulnerable to denial of service. The vulnerability exists due to an Out-of-range Pointer Offset...

7.8CVSS3.1AI score0.01667EPSS
SaveExploits1References11Affected Software1
osv_oesa
osv_oesa
•added 2022/03/12 11:04 a.m.•11 views

OESA-2022-1573 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

8.8CVSS6.8AI score0.12712EPSS
SaveExploits2References3
Veracode
Veracode
•added 2022/03/12 4:12 a.m.•38 views

Buffer Overflow

vim is vulnerable to buffer overflow. The vulnerability exists due to the use of Out-of-range Pointer Offset...

7.8CVSS3.9AI score0.01708EPSS
SaveExploits1References11Affected Software1
osv_oesa
osv_oesa
•added 2022/03/07 11:04 a.m.•16 views

OESA-2022-1555 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

7.8CVSS6.8AI score0.26474EPSS
SaveExploits4References5
Microsoft CVE
Microsoft CVE
•added 2022/03/01 8:00 a.m.•9 views

Use of Out-of-range Pointer Offset in vim/vim

...

8.4CVSS8.1AI score0.01708EPSS
SaveExploits1
Packet Storm
Packet Storm
•added 2022/02/28 12:00 a.m.•438 views

Win32k ConsoleControl Offset Confusion / Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Win32k ConsoleControl Offset Confusion', 'Description' = %q A vulnerability exists within win32k that can be leveraged by an attacker to escalate...

7.8CVSS7.3AI score0.80968EPSS
SaveExploits42
zdt
zdt
•added 2022/02/28 12:00 a.m.•668 views

Win32k ConsoleControl Offset Confusion / Privilege Escalation Exploit

A vulnerability exists within win32k that can be leveraged by an attacker to escalate privileges to those of NT AUTHORITY\SYSTEM. The flaw exists in how the WndExtra field of a window can be manipulated into being treated as an offset despite being populated by an attacker-controlled value. This...

7.8CVSS7.1AI score0.80968EPSS
SaveExploits42
Positive Technologies
Positive Technologies
•added 2022/02/27 12:00 a.m.•6 views

PT-2022-28909

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.5 Description The issue is related to a wrong offset in the bio truncate function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/27 12:00 a.m.•6 views

PT-2022-28687

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description The issue concerns the behavior of READ near OFFSET MAX in NFSD. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.2...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/02/27 12:00 a.m.•4 views

PT-2022-28762

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.10 Description The issue concerns the behavior of READ near OFFSET MAX in NFSD. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.16.1...

5.7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2022/02/25 12:00 a.m.•60 views

Fedora 34 : vim (2022-48bf3cb1c4)

The remote Fedora 34 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-48bf3cb1c4 advisory. Security fix for CVE-2022-0554 ---- Security fixes for CVE-2022-0714, CVE-2022-0729 ---- Security fix for CVE-2022-0696 ---- Security fix for...

8.8CVSS6.7AI score0.26474EPSS
SaveExploits12References13
osv_debian
osv_debian
•added 2022/02/23 2:15 p.m.•9 views

DEBIAN-CVE-2022-0729

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440...

8.8CVSS7.6AI score0.01622EPSS
SaveExploits1References1
NVD
NVD
•added 2022/02/23 2:15 p.m.•32 views

CVE-2022-0729

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440...

8.8CVSS0.01622EPSS
SaveExploits1References10
osv_azl
osv_azl
•added 2022/02/23 2:15 p.m.•20 views

AZL-8765 CVE-2022-0729 affecting package vim for versions less than 8.2.4743-1

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440...

8.8CVSS7.3AI score0.01622EPSS
SaveExploits1References1
osv_alpine
osv_alpine
•added 2022/02/23 2:15 p.m.•12 views

ALPINE-CVE-2022-0729

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440...

8.8CVSS6.8AI score0.01622EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/02/23 2:15 p.m.•13 views

CVE-2022-0729

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440...

8.8CVSS7.8AI score0.01622EPSS
SaveExploits1References13
Rows per page
Query Builder