342 matches found
PT-2020-11777
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible use after free due to improper locking in the blk mq queue tag busy iter function of blk-mq-tag.c. This could lead to local escalation of privilege with no additional execution...
Directory Traversal in iter-server
Affected versions of iter-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Exampl...
GHSA-QH38-WRGF-CJ2C Directory Traversal in iter-server
Affected versions of iter-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Exampl...
PT-2020-22492
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is reported, with a crash type indicating a heap-buffer-overflow READ 2. The crash state involves several function calls,...
Linux kernel rpmsg_eptdev_write_iter Heap Buffer Overflow DoS
The vulnerability of the rpmsgeptdevwriteiter function driver/rpmsg/rpmsgchar.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
DEBIAN-CVE-2019-19053
A memory leak in the rpmsgeptdevwriteiter function in drivers/rpmsg/rpmsgchar.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering copyfromiterfull failures, aka CID-bbe692e349e2...
UBUNTU-CVE-2019-19053
A memory leak in the rpmsgeptdevwriteiter function in drivers/rpmsg/rpmsgchar.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering copyfromiterfull failures, aka CID-bbe692e349e2...
Linux kernel memory leak vulnerability (CNVD-2019-41277)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the qrtrtunwriteiter function in net/qrtr/tun.c in versions of Linux kernel pri...
CVE-2019-1010299
The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vecdeque::Iter. The attack...
CVE-2019-1010299
The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vecdeque::Iter. The attack...
CVE-2019-1010299
The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vecdeque::Iter. The attack...
CVE-2019-1010299: Exposure of Sensitive Information to an Unauthorized Actor
The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vecdeque::Iter. The attack...
skia/api_null_canvas: Use-of-uninitialized-value in SkPath::Iter::consumeDegenerateSegments
Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5690157047480320 Project: skia Fuzzer: libFuzzerskiaapinullcanvas Fuzz target binary: apinullcanvas Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Addres...
skia/region_set_path: Heap-buffer-overflow in SkPath::Iter::doNext
Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5766950592970752 Project: skia Fuzzer: aflskiaregionsetpath Fuzz target binary: regionsetpath Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...
PT-2018-13750
Name of the Vulnerable Software and Affected Versions libbson version 1.12.0 Description The issue is related to a heap-based buffer over-read in the bson iter next internal function in bson-iter.c via a crafted bson buffer. Recommendations For libbson version 1.12.0, at the moment, there is no...
Libpango 1.40.8 - Denial of Service (PoC)
Libpango 1.40.8 - Denial of Service PoC Exploit Title: Libpango 1.40.8 - Denial of Service PoC Date: 2018-08-06 Exploit Author: Jeffery M Vendor Homepage: https://www.pango.org/ Software Link: http://ftp.gnome.org/pub/GNOME/sources/pango/1.40/pango-1.40.9.tar.xz Version: 1.40.8+ Tested on: Window...
Directory Traversal in iter-http
Affected versions of iter-http resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...
GHSA-3CGG-GH9J-W8VM Directory Traversal in iter-http
Affected versions of iter-http resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...
iter-http directory traversal vulnerability
iter-http is a Node.js based http server. A directory traversal vulnerability exists in iter-http. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence into the URL to gain access to the file system...
