EulerOS 2.0 SP3 : httpd (EulerOS-SA-2022-1730)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A carefully crafted request body can cause a buffer overflow in the modlua multipart parser r:parsebody called from Lua scripts. The Apache httpd...

CVE-2022-30787

An integer underflow in fuselibreaddir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

CVE-2022-30785

NTFS-3G contains a local memory read/write vulnerability triggered by a file handle created in fuse_lib_opendir and later used in fuse_lib_readdir when using libfuse-lite. The issue affects NTFS-3G up to 2021.8.22 (through libfuse-lite) and can enable arbitrary memory access. Public exploit detai...

CVE-2020-19499

A flaw was found in libheif. This flaw allows attackers to cause a denial of service and other unspecified impacts due to an invalid memory read. The highest threat from this vulnerability is to system availability...

ghostscript:gstoraster_fuzzer: Crash in pdfi_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=4802478790541312 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff8006 Crash State: pdfifreeobject pdficlearcontex...

PT-2022-3223 · Ntfs-3G +7 · Ntfs-3G +7

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions through 2021.8.22 when using libfuse-lite Description: The issue is related to an integer underflow in the fuse lib readdir function of the libfuse-lite library for the NTFS file system in the FUSE NTFS-3G module. This can...

radare2 buffer error vulnerability

radare2 is a set of libraries and tools for working with binary files. A buffer error vulnerability exists in radare2 versions prior to 5.7.0, which can be exploited by an attacker to read sensitive information from other memory locations or cause a crash...

PCRE buffer error vulnerability

PCRE is an open source regular expression library written in C by the individual developer Philip Hazel. A security vulnerability exists in PCRE. An attacker can exploit this vulnerability to trigger a denial of service or obtain sensitive information by forcing a read of an invalid memory addres...

PCRE buffer error vulnerability

PCRE is an open source regular expression library written in C by the individual developer Philip Hazel. A security vulnerability exists in PCRE. An attacker can exploit this vulnerability to trigger a denial of service or obtain sensitive information by forcing a read of an invalid memory addres...

CVE-2022-28254

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

CVE-2021-26388

Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service...

CVE-2021-26388

Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service...

kernel: out-of-bound Read in qrtr_endpoint_post in net/qrtr/qrtr.c

An out-of-bounds OOB memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this...

Silicon Graphics LibTIFF buffer error vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains some command line tools for working with TIFF files. A security vulnerability exists in Silicon Graphics LibTIFF. An attacker could use this...

Silicon Graphics LibTIFF buffer error vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains some command line tools for working with TIFF files. A security vulnerability exists in Silicon Graphics LibTIFF. An attacker could use this...

NewStart CGSL CORE 5.05 / MAIN 5.05 : hivex Vulnerability (NS-SA-2022-0030)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has hivex packages installed that are affected by a vulnerability: - A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivexopen function. An attacker could...

CVE-2021-3839

A flaw was found in the vhost library in DPDK. Function vhostusersetinflightfd does not validate msg-payload.inflight.numqueues, possibly causing out-of-bounds memory read/write. Any software using DPDK vhost library may crash as a result of this vulnerability. Mitigation Mitigation for this issu...

Adobe Bridge Buffer Overflow Information Disclosure

The vulnerability of the Adobe Bridge file manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

radare2 buffer error vulnerability

radare2 is a set of libraries and tools for working with binary files. radare2 has a security vulnerability that could be exploited by an attacker to read sensitive information from other memory locations or cause a crash...

CVE-2022-27404

A heap buffer overflow flaw was found in Freetype’s sfntinitface function in the sfobjs.c file. The vulnerability occurs when creating a face with a strange file and invalid index. This flaw allows an attacker to read a small amount of memory, causing the application to crash...