1248 matches found
PT-2024-40607 · Git +1 · Htslib
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 8 crash has been reported. The crash involves the following functions: cram encode container, cram flush container mt, and cr...
PT-2024-33875
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A vulnerability has been resolved in the Linux kernel related to the ppp async encode function. The issue occurs when pppoe sendmsg is called with a zero size, leading to ppp async encode bei...
HDF5 Layout Encode
The vulnerability of the H5Olayoutencode function in the H5Olayout.c file of the HDF5 library is related to buffer overflow in the queue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
KEYS: trusted: Fix memory leak in tpm2_key_encode()
...
EulerOS 2.0 SP12 : python-idna (EulerOS-SA-2024-2355)
According to the versions of the python-idna package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises...
PT-2024-41506
Affected versions of this crate did not check that the input slice passed to "webp::Encoder::encode is large enough for the specified image dimensions. If the input slice is too short, the library will read out of bounds of the buffer and encode other memory contents as an image, resulting in...
PT-2024-32124
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when nfsd4 encode fattr4 performs a "goto out" before checking for the security label, resulting in args.context being set to uninitialized data on the stack, which is...
GHSA-XMRP-424F-VFPX SQLx Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts
The following presentation at this year's DEF CON was brought to our attention on the SQLx Discord: SQL Injection isn't Dead: Smuggling Queries at the Protocol Level Archive link for posterity. Essentially, encoding a value larger than 4GiB can cause the length prefix in the protocol to overflow,...
RUSTSEC-2024-0363 Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts
The following presentation at this year's DEF CON was brought to our attention on the SQLx Discord: SQL Injection isn't Dead: Smuggling Queries at the Protocol Level Archive link for posterity. Essentially, encoding a value larger than 4GiB can cause the length prefix in the protocol to overflow,...
EulerOS 2.0 SP11 : python-idna (EulerOS-SA-2024-2108)
According to the versions of the python-idna package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises...
TPM Heap Buffer Overflow DoS
The vulnerability of the tpm2keyencode function in the security/keys/trusted-keys/trustedtpm2.c file of the Trusted Platform Module TPM subsystem of the Linux kernel is related to improper handling of the asn1encodesequence function’s return code. Exploiting this vulnerability could allow an...
CVE-2023-43971
Cross Site Scripting vulnerability in ACG-faka v1.1.7 allows a remote attacker to execute arbitrary code via the encode parameter in Index.php...
CVE-2023-43971
Cross Site Scripting vulnerability in ACG-faka v1.1.7 allows a remote attacker to execute arbitrary code via the encode parameter in Index.php...
CVE-2023-43971
Cross Site Scripting vulnerability in ACG-faka v1.1.7 allows a remote attacker to execute arbitrary code via the encode parameter in Index.php...
PT-2024-13151
Name of the Vulnerable Software and Affected Versions ACG-faka version 1.1.7 Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the encode parameter in "Index.php". Recommendations For ACG-faka version 1.1.7, avoid using the encode parameter in the...
CVE-2023-43971
CVE-2023-43971 is a Cross Site Scripting vulnerability affecting ACG-faka v1.1.7. The issue allows a remote attacker to cause arbitrary code execution via the encode parameter in Index.php. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) yields a base score of 6.1 (Medium). Attack requi...
CVE-2023-43971: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in ACG-faka v1.1.7 allows a remote attacker to execute arbitrary code via the encode parameter in Index.php...
ALPINE-CVE-2024-3651
A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...
AZL-43207 CVE-2024-3651 affecting package tensorflow for versions less than 2.16.1-7
A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...
AZL-59690 CVE-2024-3651 affecting package python3 for versions less than 3.9.19-13
A vulnerability was identified in the kjd/idna library, specifically within the idna.encode function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This...