253055 matches found
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview Affected versions of this package are vulnerable to Out-of-bounds Write HTTP2Shell via block-switch handling in the Brotli decoder, specifically DecodeBlockTypeAndLength in deps/brotli/c/dec/decode.c. An attacker can execute arbitrary code by supplying a crafted Brotli-compressed stream...
Out-of-bounds Write (HTTP2Shell)
Overview brotli is a Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose...
librsvg: Use-after-free when XML includes have duplicated entities
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...
Important: Red Hat Security Advisory: xorg-x11-server-Xwayland security update
An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow
A flaw was found in xorg-x11-server. The GLX OpenGL Extension to the X Window System interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially...
xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice
A flaw was found in xorg-x11-server. A local authenticated client can exploit this flaw by sending a crafted input device ungrab request with an unvalidated modifier value. This lack of validation causes the server to perform an out-of-bounds write on the heap, resulting in memory corruption that...
xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling
A flaw was found in xorg-x11-server. In the X Keyboard Extension XKB, key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-bas...