Incorrect User Management

github.com/ubuntu/authd is vulnerable to Incorrect User Management. The vulnerability is due to insufficient randomization of user IDs, allowing a local attacker to register usernames and spoof another user's ID, gaining their privileges. This issue affects Authd through version 0.3.6...

CVE-2024-9312

Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another user's ID and gain their privileges...

PT-2024-39562 · Authd +1 · Authd +1

Name of the Vulnerable Software and Affected Versions: Authd versions 0.3.6 and earlier Description: A local attacker who can register user names could spoof another user's ID and gain their privileges due to insufficient randomization of user IDs. The issue arises from the GenerateID method, whi...

Important: audiofile

Issue Overview: Buffer overflow in the afReadFrames function in audiofile aka libaudiofile and Audio File Library allows user-assisted remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted audio file, as demonstrated by...

CVE-2024-39697

phonenumber is a library for parsing, formatting and validating international phone numbers. Since 0.3.4, the phonenumber parsing code may panic due to a panic-guarded out-of-bounds access on the phonenumber string. In a typical deployment of rust-phonenumber, this may get triggered by feeding a...

CVE-2024-39697

The CVE affects the phonenumber Rust library. From version 0.3.4 through versions prior to 0.3.6, parsing may panic due to a panic-guarded out-of-bounds access on the input string, potentially triggered by crafted numbers such as +dwPAA;phone-context=AA sent over the network. This produces a pani...

CVE-2024-39697 phonenumber panics on parsing crafted phonenumber inputs

phonenumber is a library for parsing, formatting and validating international phone numbers. Since 0.3.4, the phonenumber parsing code may panic due to a panic-guarded out-of-bounds access on the phonenumber string. In a typical deployment of rust-phonenumber, this may get triggered by feeding a...

CVE-2024-39697 phonenumber panics on parsing crafted phonenumber inputs

phonenumber is a library for parsing, formatting and validating international phone numbers. Since 0.3.4, the phonenumber parsing code may panic due to a panic-guarded out-of-bounds access on the phonenumber string. In a typical deployment of rust-phonenumber, this may get triggered by feeding a...

phonenumber: panic on parsing crafted phonenumber inputs

Impact The phonenumber parsing code may panic due to a reachable assert! guard on the phonenumber string. In a typical deployment of rust-phonenumber, this may get triggered by feeding a maliciously crafted phonenumber, e.g. over the network, specifically strings of the form...

CVE-2015-7747 affecting package audiofile for versions less than 0.3.6-27

CVE-2015-7747 affecting package audiofile for versions less than 0.3.6-27. A patched version of the package is available...

OPENSUSE-SU-2024:10640-1 audiofile-0.3.6-11.13 on GA media

These are all security issues fixed in the audiofile-0.3.6-11.13 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2020-18781

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert...

DEBIAN-CVE-2020-18781

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert...

AZL-36932 CVE-2020-18781 affecting package audiofile 0.3.6-27

Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert...

PT-2023-11508 · Audiofile · Audiofile

Name of the Vulnerable Software and Affected Versions: audiofile version 0.3.6 Description: The issue is related to a heap buffer overflow vulnerability in the FilePOSIX::read function in File.cpp. This can cause a denial-of-service when a crafted wav file is used, and the bug can be triggered by...

AudioFile 缓冲区错误漏洞

AudioFile is a simple header-only C++ library from Adam Stark's personal developer in the UK. It is used to read and write audio files. A security vulnerability exists in AudioFile version 0.3.6, which stems from a buffer overflow vulnerability in the FilePOSIX::read function. An attacker could...

GHSA-MRCJ-5QXR-VHP2 angular-ui-notification Cross-site Scripting vulnerability

angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-34840

angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2023-34840

angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting XSS vulnerability...

angular-ui-notification 跨站脚本漏洞

angular-ui-notification is a library by Alexey Avramchik personal developer. Used to provide simple notifications, animated using Bootstrap 3 styles and css transformations. A security vulnerability exists in Angular angular-ui-notification version v0.1.0, v0.2.0, v0.3.6, which stems from a...