nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe

A flaw was found in nodejs-path-parse. All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

PT-2021-27814

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 6 crash has been reported. The crash occurs in the following functions: dispatch print error, internal exr parse header, and exr...

caddy:fuzz-parse-duration: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5162124138119168 Project: caddy Fuzzing Engine: libFuzzer Fuzz Target: fuzz-parse-duration Job Type: libfuzzerasancaddy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: NULL Sanitizer: address ASAN...

PT-2021-27812

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. The crash occurs in the following functions: dispatch print error, internal exr parse header, a...

LibreSSL 缓冲区错误漏洞

LibreSSL is an open source implementation of the Secure Sockets Layer SSL and Transport Layer Security TLS protocols. x509constraintsparsemailbox in lib/libcrypto/x509/x509constraints.c in LibreSSL 3.4.0 and earlier versions has a stack buffer overflow vulnerability. No detailed vulnerability...

PT-2024-11391

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0 Description The vulnerability is related to the mac80211 module in the Linux kernel, which is used for wireless networking. The issue arises from the ieee80211 parse tx radiotap routine, where the maximum...

USN-5085-1: SQL parse vulnerability

It was discovered that SQL parse incorrectly handled certain regular expression. An attacker could possibly use this issue to cause a denial of service...

nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe

A flaw was found in nodejs-path-parse. All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe

A flaw was found in nodejs-path-parse. All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

Ubuntu 21.04 : SQL parse vulnerability (USN-5085-1)

The remote Ubuntu 21.04 host has packages installed that are affected by a vulnerability as referenced in the USN-5085-1 advisory. It was discovered that SQL parse incorrectly handled certain regular expression. An attacker could possibly use this issue to cause a denial of service. Tenable has...

nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe

A flaw was found in nodejs-path-parse. All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity...

CVE-2021-39589

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function parsemetadata located in abc.c. It allows an attacker to cause Denial of Service...

CVE-2021-39596

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function codeparse located in code.c. It allows an attacker to cause Denial of Service...

DEBIAN-CVE-2021-39515

An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function SampleInterleavedLSScan::ParseMCU located in sampleinterleavedlsscan.cpp. It allows an attacker to cause Denial of Service...

UBUNTU-CVE-2021-39589

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function parsemetadata located in abc.c. It allows an attacker to cause Denial of Service...

CVE-2021-39589

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function parsemetadata located in abc.c. It allows an attacker to cause Denial of Service...

Swftools 代码问题漏洞

SWFTools is a suite of open source software tools for creating and manipulating SWF files. a null pointer dereference vulnerability exists in the codeparse function in SWFTools code.c. An attacker could exploit this vulnerability to cause a denial of service...

PT-2021-22668

Name of the Vulnerable Software and Affected Versions: swftools versions through 20200710 Description: An issue exists in the function code parse located in code.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For versions through 2020071...

PT-2021-22660

Name of the Vulnerable Software and Affected Versions: swftools versions prior to 20200710 Description: An issue exists in the function parse metadata located in abc.c, allowing an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For versions prior to...

libjpeg 安全漏洞

libjpeg is a C language library for processing JPEG format image data. It includes JPEG decoding, JPEG encoding and other JPEG functions. A security vulnerability exists in libjpeg that stems from an uncaught floating-point exception in the function ACLosslessScan::ParseMCU located in...