Lucene search
+L

618 matches found

OSV
OSV
added 2021/04/14 8:04 p.m.44 views

GO-2020-0022 Out-of-bounds write in github.com/cloudflare/golz4

LZ4 bindings use a deprecated C API that is vulnerable to memory corruption, which could lead to arbitrary code execution if called with untrusted user input...

9.8CVSS9.6AI score0.01058EPSS
SaveExploits0References2
Photon
Photon
added 2021/01/24 12:00 a.m.46 views

Important Photon OS Security Update - PHSA-2021-0357

Updates of 'atftp' packages of Photon OS have been released...

7.5CVSS7.5AI score0.02399EPSS
SaveExploits1
Rockylinux
Rockylinux
added 2020/11/03 12:05 p.m.29 views

lz4 bug fix and enhancement update

An update is available for lz4. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

2.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/10/21 12:00 a.m.37 views

EulerOS Virtualization 3.0.2.2 : lz4 (EulerOS-SA-2020-2191)

According to the version of the lz4 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call...

8.1CVSS7.9AI score0.09116EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/10/21 12:00 a.m.13 views

Huawei EulerOS: Security Advisory for lz4 (EulerOS-SA-2020-2191)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.1AI score0.09116EPSS
SaveExploits0References2
Veracode
Veracode
added 2020/09/07 3:02 a.m.20 views

Double Free

Wireshark is vulnerable double free. Due to a flaw in epan/dissectors/packet-kafka.c, it causes a double free during LZ4 decompression,crashing the Kafka protocol dissector...

6.5CVSS1.7AI score0.02577EPSS
SaveExploits1References12Affected Software1
OpenVAS
OpenVAS
added 2020/08/17 12:00 a.m.22 views

Wireshark Security Update (wnpa-sec-2020-10) - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.6AI score0.02577EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2020/08/17 12:00 a.m.27 views

Wireshark Security Update (wnpa-sec-2020-10) - Linux

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.6AI score0.02577EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2020/08/14 7:14 a.m.35 views

CVE-2020-17498

In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression...

4.3CVSS2AI score0.02577EPSS
SaveExploits1References4
NVD
NVD
added 2020/08/13 4:15 p.m.20 views

CVE-2020-17498

In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression...

6.5CVSS6.4AI score0.02577EPSS
SaveExploits1References9
OSV
OSV
added 2020/08/13 4:15 p.m.21 views

CVE-2020-17498

In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression...

6.5CVSS6.5AI score
SaveExploits0References9
OSV
OSV
added 2020/08/13 4:15 p.m.2 views

DEBIAN-CVE-2020-17498

In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression...

6.5CVSS7AI score0.02577EPSS
SaveExploits1References1
OSV
OSV
added 2020/08/13 4:15 p.m.7 views

UBUNTU-CVE-2020-17498

In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression...

6.5CVSS7.1AI score0.02577EPSS
SaveExploits1References6
Prion
Prion
added 2020/08/13 4:15 p.m.24 views

Double free

In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression...

4.3CVSS6.3AI score0.02577EPSS
SaveExploits1References9Affected Software4
UbuntuCve
UbuntuCve
added 2020/08/13 4:15 p.m.34 views

CVE-2020-17498

In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression...

6.5CVSS6.9AI score0.02577EPSS
SaveExploits1References5
AlpineLinux
AlpineLinux
added 2020/08/13 3:55 p.m.66 views

CVE-2020-17498

In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression...

6.5CVSS6.6AI score0.02577EPSS
SaveExploits1
Cvelist
Cvelist
added 2020/08/13 3:55 p.m.39 views

CVE-2020-17498

In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression...

6.4AI score0.02577EPSS
SaveExploits1References9
Kitploit
Kitploit
added 2020/07/14 12:30 p.m.41 views

X64Dbg - An Open-Source X64/X32 Debugger For Windows

An open-source binary debugger for Windows, aimed at malware analysis and reverse engineering of executables you do not have the source code for. There are many features available and a comprehensive plugin system to add your own. You can find more information on the blog! Screenshots Installatio...

7.3AI score
SaveExploits0References19
OpenVAS
OpenVAS
added 2020/07/03 12:00 a.m.31 views

Huawei EulerOS: Security Advisory for lz4 (EulerOS-SA-2020-1771)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.1AI score0.09116EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/07/01 12:00 a.m.29 views

EulerOS Virtualization 3.0.6.0 : lz4 (EulerOS-SA-2020-1771)

According to the version of the lz4 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that call...

8.1CVSS7.9AI score0.09116EPSS
SaveExploits0References2
Rows per page
Query Builder