2773 matches found
libwebp: Fix of 3 CVEs
CVE-2020-36329: fix use-after-free vulnerability by delaying thread termination - CVE-2020-36330: fix out-of-bounds read in ChunkVerifyAndAssign function - CVE-2020-36331: fix out-of-bounds read in ChunkAssignData function...
Malicious code in vite-plugin-chunk (npm)
The package vite-plugin-chunk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e870026da8fa5893d57ae270527d5bb4d1eb31ee085d5a9f9e14c96c504a2fc7 Any computer that has this package installed or running should be considered fully...
MAL-2025-47837 Malicious code in vite-plugin-chunk (npm)
The package vite-plugin-chunk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e870026da8fa5893d57ae270527d5bb4d1eb31ee085d5a9f9e14c96c504a2fc7 Any computer that has this package installed or running should be considered fully...
OSV-2025-787 Heap-buffer-overflow in DwaCompressor_uncompress
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=447429458 Crash type: Heap-buffer-overflow WRITE Crash state: DwaCompressoruncompress internalexrundodwaa exruncompresschunk...
Denial Of Service (DoS)
github.com/versity/versitygw is vulnerable to Denial Of Service DoS. The vulnerability is due to sending AWS chunk data without a Content-Length HTTP header, which causes the server to panic and crash, allowing an attacker to repeatedly trigger service disruption...
SUSE CVE-2023-53372
In the Linux kernel, the following vulnerability has been resolved: sctp: fix a potential overflow in sctpifwdtsnskip Currently, when traversing ifwdtsn skips with sctpwalkifwdtsn, it only checks the pos against the end of the chunk. However, the data left for the last pos may be sizeofstruct...
OESA-2025-2308 golang security update
. Security Fixes: The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.CVE-2025-22871...
CVE-2023-53372
In the Linux kernel, the following vulnerability has been resolved: sctp: fix a potential overflow in sctpifwdtsnskip Currently, when traversing ifwdtsn skips with sctpwalkifwdtsn, it only checks the pos against the end of the chunk. However, the data left for the last pos may be sizeofstruct...
UBUNTU-CVE-2023-53372
In the Linux kernel, the following vulnerability has been resolved: sctp: fix a potential overflow in sctpifwdtsnskip Currently, when traversing ifwdtsn skips with sctpwalkifwdtsn, it only checks the pos against the end of the chunk. However, the data left for the last pos may be sizeofstruct...
CVE-2023-53372 sctp: fix a potential overflow in sctp_ifwdtsn_skip
In the Linux kernel, the following vulnerability has been resolved: sctp: fix a potential overflow in sctpifwdtsnskip Currently, when traversing ifwdtsn skips with sctpwalkifwdtsn, it only checks the pos against the end of the chunk. However, the data left for the last pos may be sizeofstruct...
CVE-2023-53372
CVE-2023-53372 — Linux kernel SCTP vulnerability. The issue arises in sctp_ifwdtsn_skip where, while traversing ifwdtsn skips via _sctp_walk_ifwdtsn, the code may read beyond the chunk boundary because the remaining data can be smaller than sizeof(struct sctp_ifwdtsn_skip). This can cause a cover...
Linux Distros Unpatched Vulnerability : CVE-2022-50300
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix extent map use-after-free when handling missing device in readonechunk Store the error code before freeing the extentmap. Though it's reference count...
block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
...
SUSE CVE-2022-50300
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when handling missing device in readonechunk Store the error code before freeing the extentmap. Though it's reference counted structure, in that function it's the first and last allocation so...
CVE-2022-50300
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when handling missing device in readonechunk Store the error code before freeing the extentmap. Though it's reference counted structure, in that function it's the first and last allocation so...
DEBIAN-CVE-2022-50300
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when handling missing device in readonechunk Store the error code before freeing the extentmap. Though it's reference counted structure, in that function it's the first and last allocation so...
UBUNTU-CVE-2022-50300
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when handling missing device in readonechunk Store the error code before freeing the extentmap. Though it's reference counted structure, in that function it's the first and last allocation so...
CVE-2022-50300
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when handling missing device in readonechunk Store the error code before freeing the extentmap. Though it's reference counted structure, in that function it's the first and last allocation so...
CVE-2022-50300 btrfs: fix extent map use-after-free when handling missing device in read_one_chunk
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when handling missing device in readonechunk Store the error code before freeing the extentmap. Though it's reference counted structure, in that function it's the first and last allocation so...
CVE-2022-50300 btrfs: fix extent map use-after-free when handling missing device in read_one_chunk
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when handling missing device in readonechunk Store the error code before freeing the extentmap. Though it's reference counted structure, in that function it's the first and last allocation so...