Moddable SDK 缓冲区错误漏洞

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable USA. a security vulnerability exists in Moddable SDK v11.5.0, which stems from an invalid memory access in component asanmemmove. No details of the vulnerability are currently available...

The vulnerability of the memmove function in the NTFS file system driver for the FUSE NTFS-3G module, related to integer overflow, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the memmove function in the NTFS file system driver for the FUSE NTFS-3G module is related to integer overflow. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures through the specially created...

EulerOS Virtualization 3.0.2.0 : lz4 (EulerOS-SA-2021-2831)

According to the versions of the lz4 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer...

A crafted NTFS image can cause an integer overflow in memmove leading to a heap-based buffer overflow in the function ntfs_attr_record_resize in NTFS-3G < 2021.8.22.

...

EulerOS Virtualization 2.9.0 : lz4 (EulerOS-SA-2021-2783)

According to the versions of the lz4 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer...

EulerOS Virtualization 2.9.1 : lz4 (EulerOS-SA-2021-2747)

According to the versions of the lz4 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer...

The vulnerability of the memmove() function in the lossless LZ4 data compression algorithm allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the memmove function in the lossless LZ4 data compression algorithm is related to the operation exceeding the permissible buffer limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service...

CVE-2021-3875

There's an out-of-bounds read flaw in Vim's exdocmd.c. An attacker who is capable of tricking a user into opening a specially crafted file could trigger an out-of-bounds read on a memmove operation, potentially causing an impact to application availability...

ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize()

The ntfs3g package is susceptible to an input validation flaw. A crafted NTFS image with invalid values could trigger an improper check. This incorrect check causes an integer overflow which then leads to a heap overflow. The highest threat from this vulnerability is to confidentiality, integrity...

ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize()

The ntfs3g package is susceptible to an input validation flaw. A crafted NTFS image with invalid values could trigger an improper check. This incorrect check causes an integer overflow which then leads to a heap overflow. The highest threat from this vulnerability is to confidentiality, integrity...

EulerOS 2.0 SP5 : lz4 (EulerOS-SA-2021-2510)

According to the versions of the lz4 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading ...

EulerOS 2.0 SP8 : lz4 (EulerOS-SA-2021-2474)

According to the versions of the lz4 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading...

EulerOS 2.0 SP2 : lz4 (EulerOS-SA-2021-2407)

According to the version of the lz4 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to...

UBUNTU-CVE-2021-39254

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfsattrrecordresize, in NTFS-3G 2021.8.22...

CVE-2021-39254

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfsattrrecordresize, in NTFS-3G 2021.8.22...

CVE-2021-39254

The CVE-2021-39254 issue affects NTFS-3G prior to 2021.8.22, where a crafted NTFS image can trigger an integer overflow in memmove, causing a heap-based buffer overflow in ntfs_attr_record_resize. Connected advisories confirm NTFS-3G is the vulnerable component and that upgrades to a fixed versio...

CVE-2021-39254

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfsattrrecordresize, in NTFS-3G 2021.8.22...

CVE-2021-39254

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfsattrrecordresize, in NTFS-3G 2021.8.22...

PT-2021-5772 · Ntfs-3G +6 · Ntfs-3G +6

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions prior to 2021.8.22 Description: A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs attr record resize. This issue may allow an attacker to access...

Oracle Linux 8 : lz4 (ELSA-2021-2575)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2575 advisory. 1.8.3-3 - Fix memory corruption due to an integer overflow Resolves: CVE-2021-3520 Tenable has extracted the preceding description block directly from the Oracl...