Apache Xerces-C Resource Management Error Vulnerability

Apache Xerces-C is an XML parser from the Apache USA Foundation written in C++. Apache Xerces-C suffers from a resource management error vulnerability that stems from memory reuse after release...

Code Injection

Overview Affected versions of this package are vulnerable to Code Injection due to incorrect handling of certain XML files. An attacker can achieve remote code execution by crafting malicious XML files that exploit the vulnerability. Note: This CVE was released to notify about the release of a fi...

CVE-2023-29162

Improper buffer restrictions the IntelR C++ Compiler Classic before version 2021.8 for IntelR oneAPI Toolkits before version 2022.3.1 may allow a privileged user to potentially enable escalation of privilege via local access...

Buffer overflow

Improper buffer restrictions in some IntelR C++ Compiler Classic before version 2021.8 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-35121

The CVE-2023-35121 issue concerns improper access control in Intel’s oneAPI DPC++/C++ Compiler prior to 2022.2.1 for some toolkits prior to 2022.3.1, enabling potential privilege escalation via local access when authenticated. Affected software is Intel® oneAPI DPC++/C++ Compiler and related tool...

CVE-2023-29162

The CVE-2023-29162 entry concerns Intel’s Intel® oneAPI Toolkits, specifically the Intel C++ Compiler Classic prior to 2021.8 bundled with toolkits before 2022.3.1. The issue is an improper buffer restriction that may allow a privileged local user to escalate privileges. Affected scope includes I...

CVE-2023-29162

Improper buffer restrictions the IntelR C++ Compiler Classic before version 2021.8 for IntelR oneAPI Toolkits before version 2022.3.1 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-35121

Improper access control in the IntelR oneAPI DPC++/C++ Compiler before version 2022.2.1 for some IntelR oneAPI Toolkits before version 2022.3.1 may allow authenticated user to potentially enable escalation of privilege via local access...

PT-2024-1790 · Intel · Intel Oneapi Dpc++/C++ Compiler

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI DPC++/C++ Compiler versions prior to 2023.2.1 IntelR oneAPI DPC++/C++ Compiler versions prior to 2022.2.1 for some IntelR oneAPI Toolkits before version 2022.3.1 Description: The issue is related to improper access control in th...

The vulnerability of the __vsyslog_internal function in the glibc library, which allows a hacker to cause a service failure

The vulnerability of the vsysloginternal function in the glibc library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

gRPC: file descriptor exhaustion leads to denial of service

A flaw was found in gRPC. Lack of error handling in the TCP server in Google's gRPC, starting in version 1.23 on POSIX-compatible platforms for example, Linux, allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++,...

K000138586: Node.js c-areas vulnerability CVE-2023-31130

Security Advisory Description c-ares is an asynchronous resolver library. aresinetnetpton is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00:00:00/2" was found to cause an issue. C-ares only uses this function internally for configuration purposes which would...

CVE-2024-25112

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A denial-of-service was found in Exiv2 version v0.28.1: an unbounded recursion can cause Exiv2 to crash by exhausting the stack. The vulnerable function,...

AZL-34349 CVE-2024-25110 affecting package azure-iot-sdk-c for versions less than 2022.01.21-3

The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule...

Infinite Loop

MongoDB C Driver is vulnerable to Infinite Loop. The vulnerability is due to calling bsonutf8validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop...

[SECURITY] Fedora 38 Update: libvirt-9.0.0-4.fc38

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support...

libxml2: Multiple Vulnerabilities

Background libxml2 is the XML C parser and toolkit developed for the GNOME project. Description Multiple vulnerabilities have been discovered in libxml2. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround The...

CentOS 8 : c-ares (CESA-2023:3584)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:3584 advisory. - c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP...

JWT C Library Security Vulnerability

JWT C Library is a JWT C library open source by Ben Collins. A security vulnerability exists in JWT C Library version 1.15.3, which stems from the use of strcmp to authenticate, resulting in an authentication bypass vulnerability...

CentOS 8 : c-ares (CESA-2023:7207)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:7207 advisory. - Buffer overflow vulnerability in c-ares before 1161 thru 1170 via function aresparsesoareply in aresparsesoareply.c. CVE-2020-22217 - c-ares is an...