7578 matches found
EulerOS 2.0 SP10 : httpd (EulerOS-SA-2023-1550)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header...
Denial Of Service (DoS)
Google Chrome is vulnerable to Denial Of Service DoS. The vulnerability exists due to the out-of-bound read in WebUI Settings, which allows an attacker to perform an out-of-bounds memory read via a crafted HTML page, leading to an application crash...
Linux kernel Tap Open Buffer Overflow
The vulnerability of the tapopen function /drivers/net/tap.c in the Linux kernel’s TAP network adapter driver is related to the use of an inappropriate data structure description for reading data from memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
openssl: X.400 address type confusion in X.509 GeneralName
A type confusion vulnerability was found in OpenSSL when OpenSSL X.400 addresses processing inside an X.509 GeneralName. When CRL checking is enabled for example, the application sets the X509VFLAGCRLCHECK flag, this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call,...
PT-2023-1836 · Adobe · Substance3D - Stager
Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.0.0 and earlier Description: The issue is related to an out-of-bounds read vulnerability in the memory, which could allow an attacker to disclose sensitive information by using a specially crafted file. Th...
compress:FuzzNoBMI2Dec: Crash in pthread_create
Detailed Report: https://oss-fuzz.com/testcase?key=4682327759650816 Project: compress Fuzzing Engine: libFuzzer Fuzz Target: FuzzNoBMI2Dec Job Type: libfuzzerasancompress Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x10c00014f1e0 Crash State: pthreadcreate cgotrypthreadcreate...
PT-2023-1704
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds OOB memory read flaw was found in the parse lease state function in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker...
Wasmtime buffer error vulnerability
Wasmtime, a Bytecode Consortium project, is a standalone wasm-optimized runtime for WebAssembly and WASI only. Wasmtime suffers from a buffer error vulnerability that stems from the code generator's address pattern calculation incorrectly calculating valid addresses, which can be exploited by an...
CVE-2023-1194
An out-of-bounds OOB memory read flaw was found in parseleasestate in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check of NameOffset in the parseleasestate...
[SECURITY] [DLA 3351-1] apache2 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3351-1 [email protected] https://www.debian.org/lts/security/ Lee Garrett March 03, 2023 https://wiki.debian.org/LTS -...
ruby:fuzz_ruby_gems: Use-after-poison in str_new_frozen_buffer
Project: https://github.com/ruby/ruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6532967267958784 Project: ruby Fuzzing Engine: honggfuzz Fuzz Target: fuzzrubygems Job Type: honggfuzzasanruby Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x7ffff6a30018 Crash...
libdwarf:fuzz_globals: Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5286908805906432 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzglobals Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6160000008...
php: OOB read due to insufficient input validation in imageloadfont()
An out-of-bounds read flaw was found in PHP due to insufficient input validation in the imageloadfont function. This flaw allows a remote attacker to pass specially crafted data to the web application, trigger an out-of-bounds read error, and read the contents of memory on the system...
openssl: X.400 address type confusion in X.509 GeneralName
A type confusion vulnerability was found in OpenSSL when OpenSSL X.400 addresses processing inside an X.509 GeneralName. When CRL checking is enabled for example, the application sets the X509VFLAGCRLCHECK flag, this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call,...
tar: heap buffer overflow at from_header() in list.c via specially crafted checksum
A flaw was found in the Tar package. When attempting to read files with old V7 tar format with a specially crafted checksum, an invalid memory read may occur. An attacker could possibly use this issue to expose sensitive information or cause a crash...
RHEL 9 : httpd (RHSA-2023:0970)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0970 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: moddav:...
K82200103: Apache mod_http2 vulnerability CVE-2019-10082
Security Advisory Description In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown. CVE-2019-10082 Impact There is no impact; F5 products are not affected by this vulnerability...
K16939: Multiple Wireshark vulnerabilities
Security Advisory Description Description CVE-2014-6421 Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership between the SDP and RTP...
php: OOB read due to insufficient input validation in imageloadfont()
An out-of-bounds read flaw was found in PHP due to insufficient input validation in the imageloadfont function. This flaw allows a remote attacker to pass specially crafted data to the web application, trigger an out-of-bounds read error, and read the contents of memory on the system...
httpd: mod_dav: out-of-bounds read/write of zero byte
A flaw was found in the moddav module of httpd. A specially crafted "If:" request header can cause a memory read or write of a single zero byte due to a missing error check, resulting in a Denial of Service...