CVE-2021-45943: Out-of-bounds Write

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...

PT-2021-24325

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttDecode Disconnect function, which is called from MqttClient DecodePacket and MqttClient WaitType. Recommendations: For wolfSSL wolfMQTT version 1.9...

PT-2021-24328

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttClient DecodePacket function, which is called from MqttClient WaitType and MqttClient Subscribe. Recommendations: For wolfSSL wolfMQTT version 1.9,...

CVE-2021-45932: Out-of-bounds Write

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow 4 bytes in MqttDecodePublish called from MqttClientDecodePacket and MqttClientHandlePacket...

CVE-2021-45941: Out-of-bounds Write

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 8 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...

CVE-2021-45939: Out-of-bounds Write

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientSubscribe...

CVE-2021-45943

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...

CVE-2021-45942

CVE-2021-45942 affects OpenEXR 3.1.x prior to 3.1.4. The issue is a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute, triggered when called from the IlmThread_3_1 thread pool (NullThreadPoolProvider::addTask / ThreadPool::addGlobalTask). The public description notes this vulnerab...

CVE-2021-45938: Out-of-bounds Write

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientUnsubscribe...

CVE-2021-45952: Out-of-bounds Write

Dnsmasq 2.86 has a heap-based buffer overflow in dhcpreply called from dhcppacket and FuzzDhcp. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

CVE-2021-45955: Out-of-bounds Write

Dnsmasq 2.86 has a heap-based buffer overflow in resizepacket called from FuzzResizePacket and fuzzrfc1035.c because of the lack of a proper bounds check upon pseudo header re-insertion. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real...

CVE-2021-45942

OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf31::LineCompositeTask::execute called from IlmThread31::NullThreadPoolProvider::addTask and IlmThread31::ThreadPool::addGlobalTask. NOTE: db217f2 may be inapplicable...

CVE-2021-45957: Out-of-bounds Write

Dnsmasq 2.86 has a heap-based buffer overflow in answerrequest called from FuzzAnswerTheRequest and fuzzrfc1035.c. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

PT-2021-24322

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow of 8 bytes in the MqttDecode Publish function, which is called from MqttClient DecodePacket and MqttClient HandlePacket. Recommendations: For wolfSSL wolfMQTT...

CVE-2021-45937: Out-of-bounds Write

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientConnect...

CVE-2021-45948: Out-of-bounds Write

Open Asset Import Library aka assimp 5.1.0 and 5.1.1 has a heap-based buffer overflow in m3dsafestr called from m3dload and Assimp::M3DWrapper::M3DWrapper...

EulerOS 2.0 SP5 : vim (EulerOS-SA-2021-2937)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3778, CVE-2021-3872 - vim is vulnerable to Use After Free CVE-2021-3796 Note that Tenable...

CVE-2021-45942

OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf31::LineCompositeTask::execute called from IlmThread31::NullThreadPoolProvider::addTask and IlmThread31::ThreadPool::addGlobalTask. NOTE: db217f2 may be inapplicable...

CVE-2021-45942: Out-of-bounds Write

OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf31::LineCompositeTask::execute called from IlmThread31::NullThreadPoolProvider::addTask and IlmThread31::ThreadPool::addGlobalTask. NOTE: db217f2 may be inapplicable...

CVE-2021-45951: Out-of-bounds Write

Dnsmasq 2.86 has a heap-based buffer overflow in checkbadaddress called from checkforboguswildcard and FuzzCheckForBogusWildcard. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...