CVE-2024-22097

A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch ab0ee111 and 2.5.0. A specially crafted .vdhr file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-22097

CVE-2024-22097 : A double-free vulnerability in The Biosig Project’s libbiosig, specifically in the BrainVision Header Parsing code for the Master Branch (commit ab0ee111) and version 2.5.0. A crafted BrainVision (.vdhr) file can trigger the flaw, enabling arbitrary code execution. The vulnerabil...

CVE-2024-23809

CVE-2024-23809 affects The Biosig Project’s libbiosig 2.5.0 and the Master branch (ab0ee111). A double-free in the BrainVision ASCII Header Parsing can allow arbitrary code execution via a crafted .vdhr file. Impact: high/critical as per CVSS 3.1 (Network, no user interaction). Remediation in pub...

PT-2024-2159 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 2.5.0 and Master Branch ab0ee111 Description: A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of libbiosig. This issue is related to an error in memory deallocation. Exploitation of...

Biosig Project libbiosig Resource Management Error Vulnerability

BioSig Project Biosig Project libbiosig is an open source software library for biomedical signal processing from BioSig Project. It has features for biosignal analysis. A resource management error vulnerability exists in Biosig Project libbiosig version 2.5.0, which stems from a double release...

The Biosig Project libbiosig BrainVision ASCII Header Parsing double-free vulnerability

Talos Vulnerability Report TALOS-2024-1919 The Biosig Project libbiosig BrainVision ASCII Header Parsing double-free vulnerability February 20, 2024 CVE Number CVE-2024-23809 SUMMARY A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project...

Biosig Project libbiosig Security Vulnerabilities

BioSig Project Biosig Project libbiosig is an open source software library for biomedical signal processing from BioSig Project. It has features for biosignal analysis. A security vulnerability exists in Biosig Project libbiosig version 2.5.0 due to a double release vulnerability in the BrainVisi...

PT-2024-19204 · Biosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: The Biosig Project libbiosig versions 2.5.0 and Master Branch ab0ee111 Description: A double-free vulnerability exists in the BrainVision Header Parsing functionality. This can be triggered by a specially crafted .vdhr file, potentially leadi...

Denial Of Service (DoS)

libsquid.so is vulnerable to Denial Of Service DoS. The vulnerability is due to HTTP header parsing, allowing remote attackers to perform Denial of Service attacks by sending oversized headers...

AZL-42503 CVE-2024-25617 affecting package squid 5.7-5

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or a remote server to perform Denial of...

DEBIAN-CVE-2024-25617

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or a remote server to perform Denial of...

Design/Logic Flaw

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or a remote server to perform Denial of...

UBUNTU-CVE-2024-25617

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or a remote server to perform Denial of...

SUSE-SU-2024:0472-1 Security update for tomcat

This update for tomcat fixes the following issues: Updated to Tomcat 9.0.85: - CVE-2023-45648: Improve trailer header parsing bsc1216118. - CVE-2023-42794: FileUpload: remove tmp files to avoid DoS on Windows bsc1216120. - CVE-2023-42795: Improve handling of failures during recycle methods...

The vulnerability of the HTTP-server’s header parsing function on the uC-HTTP server allows a attacker to execute arbitrary code.

The vulnerability of the HTTP server’s header parsing function on the uC-HTTP server is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Design/Logic Flaw

python-multipart is a streaming multipart parser for Python. When using form data, python-multipart uses a Regular Expression to parse the HTTP Content-Type header, including options. An attacker could send a custom-made Content-Type option that is very difficult for the RegEx to process, consumi...

Important: tomcat

Issue Overview: Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly...

objstor (>=0.4.6, <=0.4.20), rblog (>=0.100.0, <=0.123.0) +18 more potentially affected by CVE-2024-23644 via trillium-http (>=0.2.14, <=0.3.3)

trillium-http CARGO version =0.2.14, =0.4.6, =0.100.0, =0.2.0, =0.2.0-rc.1, =0.1.0, =0.2.0, =0.0.1, =0.2.0, =0.2.0, =0.3.0, =0.3.1 and more Source cves: CVE-2024-23644 Source advisory: OSV:GHSA-9F9P-CP3C-72JF...

PT-2026-60948

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 1.1.0 Description An issue exists where the server fails to properly parse the ID, DB, and NS headers in HTTP REST API requests that contain special characters. Unauthenticated attackers can send crafted HTTP reques...

python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is...