ROS-2-799

2.799 VLC vulnerability CVE-2020-13428 1. Vulnerability description: Vulnerability in VLC 3.0.11 player The vulnerability could cause a buffer overflow in the hxxxAnnexBtoxVC function. The vulnerability potentially allows to organize attacker's code execution when playing specially formatted vide...

ROS-2-635

2.635 VLC vulnerability CVE-2020-13428 1. Vulnerability description: Vulnerability in VLC 3.0.11 player The vulnerability could cause a buffer overflow in the hxxxAnnexBtoxVC function. The vulnerability potentially allows to organize attacker's code execution when playing specially formatted vide...

CVE-2021-32780

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions Envoy transitions a H/2 connection to the CLOSED state when it receives a GOAWAY frame without any streams outstanding. The connection state is transitioned to...

CVE-2021-32780

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions Envoy transitions a H/2 connection to the CLOSED state when it receives a GOAWAY frame without any streams outstanding. The connection state is transitioned to...

Code injection

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions Envoy transitions a H/2 connection to the CLOSED state when it receives a GOAWAY frame without any streams outstanding. The connection state is transitioned to...

CVE-2021-32780

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions Envoy transitions a H/2 connection to the CLOSED state when it receives a GOAWAY frame without any streams outstanding. The connection state is transitioned to...

CVE-2021-32780

CVE-2021-32780 affects Envoy. A sequence of HTTP/2 GOAWAY followed by SETTINGS (SETTINGS_MAX_CONCURRENT_STREAMS=0) frames can trigger an invalid state transition from CLOSED to DRAINING, causing abnormal termination and DoS in the presence of untrusted upstream servers. Affected Envoy versions in...

CVE-2021-32780 Incorrect handling of H/2 GOAWAY followed by SETTINGS frames

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions Envoy transitions a H/2 connection to the CLOSED state when it receives a GOAWAY frame without any streams outstanding. The connection state is transitioned to...

CVE-2021-32780: Improper Check for Unusual or Exceptional Conditions

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions Envoy transitions a H/2 connection to the CLOSED state when it receives a GOAWAY frame without any streams outstanding. The connection state is transitioned to...

UBUNTU-CVE-2020-18734

A stack buffer overflow in /ddsi/qbitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash...

Important: Red Hat Security Advisory: Red Hat Virtualization Host security and bug fix update [ovirt-4.4.7]

An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

CVE-2020-36449

An issue was discovered in the kekbit crate before 0.3.4 for Rust. For ShmWriter, Send is implemented without requiring H: Send...

PT-2021-29932

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.277 Description The issue is related to a buffer overflow in the H RTAS rets buffer. It was introduced in version v3.10 and fixed in version v4.4.277. The actual impact and attack plausibility have not yet...

PT-2021-29901

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.10 through 4.9.276 Description The issue is related to a buffer overflow in the H RTAS rets buffer. It was introduced in version v3.10 and fixed in version v4.9.277. The actual impact and attack plausibility have not ye...

PT-2021-29829

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.10 through 4.19.198 Description The issue is related to a buffer overflow in the H RTAS rets buffer. It was introduced in version v3.10 and fixed in version v4.19.199. The actual impact and attack plausibility have not...

PT-2021-29772

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.10 through 5.4.135 Description The issue is related to a buffer overflow in the H RTAS rets buffer. It was introduced in version v3.10 and fixed in version v5.4.136. The actual impact and attack plausibility have not ye...

PT-2021-29702

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.10 through 5.10.53 Description The issue is related to a buffer overflow in the H RTAS rets buffer. It was introduced in version v3.10 and fixed in version v5.10.54. The actual impact and attack plausibility have not ye...

PT-2021-29635

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.10 through 5.13.5 Description The issue is related to a buffer overflow in the H RTAS rets buffer. It was introduced in version v3.10 and fixed in version v5.13.6. The actual impact and attack plausibility have not yet...

PT-2021-25834

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.10 through 4.19.198 Description The issue is related to a buffer overflow in the H RTAS rets buffer. It was introduced in version v3.10 and fixed in version v4.19.199. The actual impact and attack plausibility have not...

PT-2021-25707

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.10 through 5.10.53 Description: The issue is related to a buffer overflow in the H RTAS rets buffer. It was introduced in version v3.10 and fixed in version v5.10.54. The actual impact and attack plausibility have not...