UBUNTU-CVE-2023-0836

An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1. There are 5 bytes left uninitialized in the connection buffer when encoding the FCGIBEGINREQUEST record. Sensitive data may be disclos...

SUSE CVE-2023-0836

An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1. There are 5 bytes left uninitialized in the connection buffer when encoding the FCGIBEGINREQUEST record. Sensitive data may be disclos...

SUSE CVE-2013-7345

The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service CPU consumption via a crafted ASCII file that triggers a large amount of...

SUSE CVE-2014-0172

Integer overflow in the checksection function in dwarfbeginelf.c in the libdw library, as used in elfutils 0.153 and possibly through 0.158 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a malformed compressed debug section in an ELF...

SUSE CVE-2015-8050

Use-after-free vulnerability in the MovieClip object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before...

SUSE CVE-2017-0376

The hidden-service feature in Tor before 0.3.0.8 allows a denial of service assertion failure and daemon exit in the connectionedgeprocessrelaycell function via a BEGINDIR cell on a rendezvous circuit...

SUSE CVE-2017-0375

The hidden-service feature in Tor before 0.3.0.8 allows a denial of service assertion failure and daemon exit in the relaysendendcellfromedge function via a malformed BEGIN cell...

PT-2022-37290 · Git +1 · Wabt

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a crash type identified as Container-overflow WRITE 4. The crash state involves several functions:...

PT-2022-34070

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.137 Description A potential issue exists due to a race between bmap and write in the ext4 iomap begin function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-32748

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.50 Description The issue is related to the zonefs iomap begin function for reads. It was introduced in version v5.6 and fixed in version v5.15.50. The actual impact and attack plausibility have not yet been...

PT-2022-32901

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.125 Description The issue concerns a fix in the zonefs iomap begin function for reads. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32547

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.7 Description A potential security issue has been identified in the Linux Kernel, specifically in the zonefs iomap begin function for reads. The actual impact and attack plausibility have not yet been prove...

Malicious code in qunit-begin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b929a1f556c9d20fc74710d9609712fb8790c92576e92babcdbe8267022e6752 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5566 Malicious code in qunit-begin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b929a1f556c9d20fc74710d9609712fb8790c92576e92babcdbe8267022e6752 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2021-27994

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack buffer overflow error, which occurs during the execution of certain functions. Specifically, the functions fn ElIn evaluate...

curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

Libcurl offers a wildcard matching functionality, which allows a callback set with CURLOPTCHUNKBGNFUNCTION to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns...

curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

Libcurl offers a wildcard matching functionality, which allows a callback set with CURLOPTCHUNKBGNFUNCTION to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns...

OSV-2021-801 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34665 Crash type: UNKNOWN READ Crash state: std::1::tree, std std::1::mapJson::Value::CZString, Json::Value, std::1::lessJson::Value::CZ Json::Value::begin...

PT-2021-28279

Name of the Vulnerable Software and Affected Versions: Json::Value affected versions not specified Description: The issue is related to a crash caused by an unknown read. The crash state indicates a problem with the std:: 1:: tree and std:: 1::map functions, specifically when using...

PT-2021-28273

Name of the Vulnerable Software and Affected Versions: Json::Value affected versions not specified Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves the std:: 1:: tree and std:: 1::map functions, specifically with Json::Value::CZString and Json::Value. Th...