Advisory ROSA-SA-2021-1854

Software: imlib2 1.4.5 OS: Cobalt 7.9 CVE-ID: CVE-2011-5326 CVE-Crit: HIGH CVE-DESC: imlib2 before 1.4.9 allows remote attackers to cause a denial of service division-by-zero error and application crash by drawing a 2x1 ellipse. CVE-STATUS: default CVE-REV: default CVE-ID: CVE-2014-9762 CVE-Crit:...

NVIDIA OTE 缓冲区错误漏洞

Nvidia NVIDIA OTE is a standalone, software-partitioned environment from Nvidia Corporation that provides trusted operations. NVIDIA OTE is vulnerable to a buffer error vulnerability stemming from a flaw in the NVIDIA OTE protocol message parsing code, where a faulty boundary check can lead to a...

CVE-2021-20093

A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server...

CVE-2021-20093

A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server...

Buffer overflow

A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server...

CVE-2021-20093

A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server...

Information Disclosure

libslirp is vulnerable to information disclosure. The flaw exists in the bootpinput function and could occur while processing a udp packet that is smaller than the size of the 'bootpt' structure. A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory from the host...

CVE-2021-3592

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootpinput function and could occur while processing a udp packet that is smaller than the size of the 'bootpt' structure. A malicious guest could use this flaw to leak 10 byte...

Design/Logic Flaw

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootpinput function and could occur while processing a udp packet that is smaller than the size of the 'bootpt' structure. A malicious guest could use this flaw to leak 10 byte...

CVE-2021-3592

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootpinput function and could occur while processing a udp packet that is smaller than the size of the 'bootpt' structure. A malicious guest could use this flaw to leak 10 byte...

CVE-2021-3592

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootpinput function and could occur while processing a udp packet that is smaller than the size of the 'bootpt' structure. A malicious guest could use this flaw to leak 10 byte...

CVE-2021-3592

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootpinput function and could occur while processing a udp packet that is smaller than the size of the 'bootpt' structure. A malicious guest could use this flaw to leak 10 byte...

CVE-2021-3592

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootpinput function and could occur while processing a udp packet that is smaller than the size of the 'bootpt' structure. A malicious guest could use this flaw to leak 10 byte...

SUSE: Security Advisory (SUSE-SU-2020:2241-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:2240-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Telegram Integer Overflow Vulnerability

Telegram is an instant messaging mobile application. An integer overflow vulnerability exists in the custom derived function LOTGradient :: populate of the rlottie library in Telegram Android version prior to 7.1.0 2090, iOS version prior to 7.1, and macOS version prior to 7.1. An attacker can...

Telegram Type Obfuscation Vulnerability

Telegram is an instant messaging mobile application. Telegram versions prior to 7.1.0 2090 for Android, 7.1 for iOS, and 7.1 for macOS are subject to a type obfuscation vulnerability in the custom derived VDasher constructor function of the rlottie library. An attacker can exploit this...

Telegram Type Obfuscation Vulnerability (CNVD-2021-38311)

Telegram is an instant messaging mobile application. Telegram Android version prior to 7.1.0 2090, iOS version prior to 7.1, and macOS version prior to 7.1 are subject to a type confusion vulnerability in the LOTCompLayerItem :: LOTCompLayerItem function, which is a custom derivative of the rlott...

CVE-2021-31319

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by an Integer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious...

CVE-2021-31317

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by a Type Confusion in the VDasher constructor of their custom fork of the rlottie library. A remote attacker might be able to access Telegram's heap memory out-of-bounds on a victim device via a malicious animated...