3398 matches found
Joyent Node.js atob Denial of Service Vulnerability
Joyent Node.js is the United States Joyent a set of web applications built on top of Google V8 JavaScript engine platform. atob is one of the use of Buffer to simulate the browser ATOB functionality of the module . A security vulnerability exists in atob 2.0.3 and earlier on Joyent Node.js 4.x an...
CVE-2018-3745
atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below...
CVE-2018-3745
atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below...
Input validation
atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below...
CVE-2018-3745
atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below...
PT-2018-16167 · Node.Js · Atob
Name of the Vulnerable Software and Affected Versions: atob versions 2.0.3 and earlier Description: The issue arises when the atob function allocates uninitialized Buffers upon receiving a number as input on Node.js versions 4.x and below. Recommendations: Update to version 2.1.0 or later...
DEBIAN-CVE-2018-11506
The srdoioctl function in drivers/scsi/srioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer, as...
CVE-2018-11506
The srdoioctl function in drivers/scsi/srioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service stack-based buffer overflow or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer, as...
Information Disclosure
libtiff.so is vulnerable to information disclosure attacks. The vulnerability exists due to the possibility of accessing uninitialized buffers in TIFFReadBufferSetup of libtiff/tifread.c...
Out-of-bounds Read
Overview Versions of base64-url before 2.0.0 are vulnerable to out-of-bounds read as it allocates uninitialized Buffers when number is passed in input. Recommendation Update to version 2.0.0 or later. References - HackerOne Report - GitHub Advisory...
Out-of-bounds Read
Overview Versions of base64url before 3.0.0 are vulnerable to to out-of-bounds reads as it allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below. Recommendation Update to version 3.0.0 or later. References - HackerOne Report - PR 25 - GitHub Advisory...
Out-of-bounds Read
Overview Versions of byte before 1.4.1 allocate uninitialized buffers and read data from them past the initialized length Recommendation Update to version 1.4.1 or later. References - HackerOne Report - PR 3 - GitHub Advisory...
Out-of-bounds Read
Overview Versions of atob before 2.1.0 uninitialized Buffers when number is passed in input on Node.js 4.x and below. Recommendation Update to version 2.1.0 or later. References - HackerOne Report - GitHub Advisory...
Out-of-bounds Read
Overview Versions of concat-with-sourcemaps before 1.0.6 allocates uninitialized Buffers when a number is passed as a separator. Recommendation Update to version 1.0.6 or later. References - HackerOne Report - Source Reference - GitHub Advisory...
Information Disclosure
byte is vulnerable to information disclosure through uninitialized buffers. The vulnerability exists due to the usage of Buffer which does not validate the memory is initialized, allowing information disclosure attacks to occur...
The vulnerability of the Qualcomm Security Feature component in the Android operating system allows a hacker to trigger buffer overflows.
The vulnerability of the Qualcomm Security Feature component of the Android operating system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to trigger a buffer overflow...
The vulnerability of the Android wireless network driver from the CAF repository, which allows a hacker to execute arbitrary code.
The vulnerability of the Android wireless network driver from the CAF repository allows for arbitrary code to be executed outside of the buffer in memory. Exploiting this vulnerability could enable a malicious actor to execute arbitrary code remotely...
Cross site request forgery (csrf)
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, and SD 835, TOCTOU vulnerability may occur while composing the RPMB request using HLOS controlled buffers...
CVE-2016-10409
CVE-2016-10409 describes a TOCTOU vulnerability in RPMB request construction on Android devices using Qualcomm platforms (Snapdragon Automotive and Snapdragon Mobile) prior to the 2018-04-05 security patch level. The issue arises when RPMB requests are composed using buffers controlled by the hig...
Junos OS: Mbuf leak due to processing MPLS packets in VPLS network.
A Junos device with VPLS routing-instances configured on one or more interfaces may be susceptible to an mbuf leak when processing a specific MPLS packet. Approximately 1 mbuf is leaked per each packet processed. The number of mbufs is platform dependent. The following command provides the number...