Lucene search
+L

8088 matches found

ATTACKERKB
ATTACKERKB
added 2021/07/14 7:15 a.m.2 views

CVE-2021-36373

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected...

5.5CVSS5.3AI score0.02532EPSS
SaveExploits0References16Affected Software1
OSV
OSV
added 2021/07/14 7:15 a.m.9 views

UBUNTU-CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

5.5CVSS6.9AI score0.02642EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2021/07/14 7:15 a.m.4 views

CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

5.5CVSS6.5AI score0.02642EPSS
SaveExploits0References16Affected Software1
Debian CVE
Debian CVE
added 2021/07/14 6:20 a.m.37 views

CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

5.5CVSS6.2AI score0.02642EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2021/07/14 6:20 a.m.42 views

CVE-2021-36373

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected...

5.5CVSS6.3AI score0.02532EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2021/07/14 6:20 a.m.36 views

CVE-2021-36373

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected...

5.5CVSS6.2AI score0.02532EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.11 views

The vulnerability of the tif_getimage.c component in the LibTIFF library, related to writing beyond the buffer boundaries, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the tifgetimage.c component in the LibTIFF library is related to a buffer overflow vulnerability. This could potentially lead to a buffer overflow through the creation of an RGBA image, due to the presence of the “Nagative-size-param” condition. Exploiting this vulnerability...

8.8CVSS7.1AI score0.03356EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.12 views

The vulnerability of the WebAudio component in the Google Chrome browser, which allows a hacker to trigger a service failure.

The vulnerability of the WebAudio component in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

8.8CVSS7.6AI score0.01746EPSS
SaveExploits0References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.9 views

The vulnerability of the search_in_range function in the Oniguruma library, related to reading beyond the permissible buffer limits, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the searchinrange function in the Oniguruma library relates to integer overflow of values. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

9.8CVSS6.9AI score0.10539EPSS
SaveExploits3References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.10 views

The vulnerability of the WritePNGImage function in the console-based image editing tool ImageMagick involves reading data beyond the allowed buffer size. This allows attackers to access confidential data and cause service interruptions.

The vulnerability of the WritePNGImage function in the console-based ImageMagick graphics editor is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures...

9.1CVSS7.9AI score0.02888EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.8 views

The vulnerability of the ReadPANGOImage function in the ImageMagick graphics file reading and editing program lies in memory initialization errors. This allows attackers to gain access to confidential information or cause service interruptions.

The vulnerability of the ReadPANGOImage function in the ImageMagick graphics file reading and editing program is related to incorrect initialization. Exploiting this vulnerability allows an attacker to gain access to confidential information or cause service failures...

8.8CVSS7.1AI score0.01859EPSS
SaveExploits0References10Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.11 views

The vulnerability of the getChunkOffsetTableSize() function in software for storing OpenEXR images with a wide dynamic range in brightness levels, related to out-of-buffer writing, allows attackers to cause service interruptions.

The vulnerability of the getChunkOffsetTableSize function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the operation exceeding the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.9AI score0.00464EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.10 views

The vulnerability of many components of the ZeroMQ messaging system, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of many components of the ZeroMQ messaging system is related to a bug in the resource management mechanism. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

7.5CVSS7.2AI score0.03408EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.23 views

The vulnerability of the HuffmanDecodeImage function in the command-line applications for processing GraphicsMagick image files, related to integer overflow, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the HuffmanDecodeImage function in the command-line applications for processing GraphicsMagick image files is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and caus...

9.8CVSS7.7AI score0.05356EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.11 views

The vulnerability of the WriteJP2Image function in the ImageMagick program, which is used for reading and editing graphic files, relates to memory initialization errors. This vulnerability allows attackers to gain access to confidential information or cause service interruptions.

The vulnerability of the WriteJP2Image function in the ImageMagick program, which is used for reading and editing graphic files, is related to incorrect initialization. Exploiting this vulnerability allows an attacker to gain access to confidential information or cause service failures...

8.8CVSS7.1AI score0.01883EPSS
SaveExploits0References10Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.13 views

The vulnerability of the multi-media library Ffmpeg allows a intruder to gain access to confidential data, compromise its integrity, and cause service interruptions.

Vulnerability of the multi-media library Ffmpeg. Exploitation of this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.8CVSS7.2AI score0.02305EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.19 views

The vulnerability of the FastHufDecoder::refill library in the ImfFastHuf.cpp software for storing images in OpenEXR format with a wide dynamic range of brightness levels, related to reading data beyond the buffer’s acceptable limits, allows attackers to cause service interruptions.

The vulnerability of the FastHufDecoder::refill library in the ImfFastHuf.cpp software for storing images with wide dynamic range brightness in the OpenEXR format is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause...

6.5CVSS6.9AI score0.01785EPSS
SaveExploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.14 views

The vulnerability of the ImfOptimizedPixelReading.h library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from reading data beyond the acceptable buffer limit. This allows attackers to cause service interruptions.

The vulnerability of the ImfOptimizedPixelReading.h library, which is used in software for storing images with wide dynamic range brightness in OpenEXR format, relates to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service...

6.5CVSS6.9AI score0.01793EPSS
SaveExploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.10 views

The vulnerability of the XkbSetMap function in the X Window System X.Org Server implementation arises from the possibility of an out-of-buffer operation in memory. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the XkbSetMap function in the X Window System X.Org Server implementation is related to the execution of operations that exceed the permissible data buffer limits. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and caus...

7.8CVSS7.6AI score0.00393EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.6 views

The vulnerability of the ImageMagick image processing component, a console-based graphic editor, relates to reading data beyond the allowed buffer size. This allows attackers to cause service interruptions.

The vulnerability of the ImageMagick image processing component relates to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS7AI score0.03498EPSS
SaveExploits1References11Affected Software2
Rows per page
Query Builder