Lucene search
+L

38 matches found

Veracode
Veracode
added 2022/09/01 1:11 p.m.24 views

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service.The vulnerability exists in the TIFFClose function in tiffcrop.c due to invalid pointer free operation which allows an attacker to crash the system via a maliciously crafted file...

6.5CVSS6.4AI score0.00993EPSS
SaveExploits1References8Affected Software4
ATTACKERKB
ATTACKERKB
added 2022/08/31 4:15 p.m.6 views

CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

6.5CVSS6.8AI score0.00993EPSS
SaveExploits1References8
OSV
OSV
added 2022/08/31 4:15 p.m.3 views

ALPINE-CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

6.5CVSS6.7AI score0.00993EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2022/08/31 4:15 p.m.45 views

CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

6.5CVSS6.8AI score0.00993EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2022/08/31 12:0 a.m.40 views

CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

6.5CVSS7.1AI score0.00993EPSS
SaveExploits1
OSV
OSV
added 2021/11/09 9:52 a.m.6 views

SUSE-SU-2021:3635-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - Fix heap use-after-free in virtionetreceivercu bsc1189938, CVE-2021-3748 - Fix out-of-bounds write in UAS USB Attached SCSI device emulation bsc1189702, CVE-2021-3713 - usbredir: free call on invalid pointer in bufpalloc...

8.5CVSS6.7AI score0.02904EPSS
SaveExploits0References19
OpenVAS
OpenVAS
added 2021/05/03 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for compat-openldap (EulerOS-SA-2021-1771)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.77738EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/04/15 12:0 a.m.28 views

EulerOS Virtualization 2.9.1 : openldap (EulerOS-SA-2021-1719)

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateChec...

7.5CVSS7AI score0.84224EPSS
SaveExploits1References12
OSV
OSV
added 2021/03/03 5:13 p.m.8 views

SUSE-SU-2021:0693-1 Security update for openldap2

This update for openldap2 fixes the following issues: - bsc1182408 CVE-2020-36230 - an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service. - bsc1182411 CVE-2020-36229 - ldapX509dn2bv crash in the X.509 DN parsing in adkeystring, resulting...

7.5CVSS7.4AI score0.84224EPSS
SaveExploits1References23
Tenable Nessus
Tenable Nessus
added 2021/02/05 12:0 a.m.40 views

EulerOS 2.0 SP9 : openldap (EulerOS-SA-2021-1250)

According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resultin...

7.5CVSS7AI score0.84224EPSS
SaveExploits0References11
OSV
OSV
added 2021/01/26 6:15 p.m.4 views

ALPINE-CVE-2020-36224

A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

7.5CVSS6.7AI score0.043EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/01/25 9:44 a.m.27 views

CVE-2020-36224

A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service...

7.5AI score0.043EPSS
SaveExploits0References17
Cvelist
Cvelist
added 2020/12/30 8:20 p.m.31 views

CVE-2019-16747

In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free leading to memory corruption and a daemon crash via a crafted incoming network message, a different vulnerability than CVE-2019-14431...

8.7AI score0.01773EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2015/06/25 8:31 a.m.5 views

php: invalid pointer free() in phar_tar_process_metadata()

An invalid free flaw was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened...

7.5CVSS7.5AI score0.07697EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2013/05/30 6:24 p.m.8 views

libtirpc: invalid pointer free leads to rpcbind daemon crash

The svcdggetargs function in libtirpc 0.2.3 and earlier allows remote attackers to cause a denial of service rpcbind crash via a Sun RPC request with crafted arguments that trigger a free of an invalid pointer...

4.3CVSS5.8AI score0.0646EPSS
SaveExploits3References4
OpenVAS
OpenVAS
added 2009/08/17 12:0 a.m.33 views

Fedora Core 11 FEDORA-2009-8132 (OpenEXR)

The remote host is missing an update to OpenEXR announced via advisory FEDORA-2009-8132. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

7.5CVSS6.3AI score0.06437EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2009/08/17 12:0 a.m.40 views

Fedora Core 10 FEDORA-2009-8136 (OpenEXR)

The remote host is missing an update to OpenEXR announced via advisory FEDORA-2009-8136. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

7.5CVSS6.3AI score0.06437EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2009/08/01 12:0 a.m.30 views

Fedora 10 : OpenEXR-1.6.1-8.fc10 (2009-8136)

Wed Jul 29 2009 Rex Dieter 1.6.1-8 - CVE-2009-1720 OpenEXR: Multiple integer overflows 513995 - CVE-2009-1721 OpenEXR: Invalid pointer free by image decompression 514003 - Fri Jul 24 2009 Fedora Release Engineering - 1.6.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora12MassRebuild - Mon...

7.5CVSS5.3AI score0.06437EPSS
SaveExploits1References7
Rows per page
Query Builder