Lucene search
+L

122 matches found

OSV
OSV
added 2021/11/24 1:15 a.m.4 views

ALPINE-CVE-2021-28704

PoD operations on misaligned GFNs This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have more memory assigne...

8.8CVSS7.3AI score0.00328EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/24 1:15 a.m.32 views

Design/Logic Flaw

PoD operations on misaligned GFNs This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have more memory assigne...

6.9CVSS8.5AI score0.00348EPSS
SaveExploits0References5Affected Software3
Ubuntu
Ubuntu
added 2019/12/10 1:49 p.m.71 views

USN-4218-1: GNU C Library vulnerability

Jakub Wilk discovered that GNU C Library incorrectly handled certain memory alignments. An attacker could possibly use this issue to execute arbitrary code or cause a crash...

9.8CVSS8AI score0.04689EPSS
SaveExploits0
OSV
OSV
added 2019/12/10 1:49 p.m.5 views

USN-4218-1 eglibc vulnerability

Jakub Wilk discovered that GNU C Library incorrectly handled certain memory alignments. An attacker could possibly use this issue to execute arbitrary code or cause a crash...

9.8CVSS7.5AI score0.04689EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/12/04 12:0 a.m.30 views

EulerOS 2.0 SP2 : zziplib (EulerOS-SA-2019-2478)

According to the versions of the zziplib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The zziplib is a lightweight library to easily extract data from zip files.Security Fixes:An issue was discovered in ZZIPlib through 0.13.69...

6.5CVSS6.1AI score0.02801EPSS
SaveExploits13References14
Veracode
Veracode
added 2018/02/01 8:27 a.m.24 views

Denial Of Service (DoS)

ZZIPlib is vulnerable to denial of service DoS attacks. The library contains a memory alignment error and bus error in the zzip/zip.c file, allowing a malicious user to pass a zip file to the application to cause it to crash...

6.5CVSS6AI score0.02242EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2018/02/01 5:29 a.m.23 views

Design/Logic Flaw

In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the zzipfetchdisktrailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

4.3CVSS6.1AI score0.02242EPSS
SaveExploits1References3Affected Software2
NVD
NVD
added 2018/02/01 5:29 a.m.18 views

CVE-2018-6484

In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the zzipfetchdisktrailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS5.6AI score0.02242EPSS
SaveExploits1References3
OSV
OSV
added 2018/02/01 5:29 a.m.4 views

DEBIAN-CVE-2018-6484

In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the zzipfetchdisktrailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS5.5AI score0.02242EPSS
SaveExploits1References1
OSV
OSV
added 2018/02/01 5:29 a.m.27 views

CVE-2018-6484

In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the zzipfetchdisktrailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS6.5AI score
SaveExploits0References3
Debian CVE
Debian CVE
added 2018/02/01 5:0 a.m.39 views

CVE-2018-6484

In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the zzipfetchdisktrailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS4.8AI score0.02242EPSS
SaveExploits1
CVE
CVE
added 2018/02/01 5:0 a.m.81 views

CVE-2018-6484

CVE-2018-6484 affects ZZIPlib (zziplib) up to and including 0.13.67, with a memory alignment error and bus error in __zzip_fetch_disk_trailer (zzip/zip.c) that can be exploited by crafted ZIP files to cause a denial of service. Connected sources show broader zziplib issues (various CVEs in 0.13.6...

6.5CVSS5.5AI score0.02242EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2018/02/01 5:0 a.m.27 views

CVE-2018-6484

In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the zzipfetchdisktrailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

5.6AI score0.02242EPSS
SaveExploits1References3
OSV
OSV
added 2018/02/01 12:0 a.m.9 views

UBUNTU-CVE-2018-6484

In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the zzipfetchdisktrailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

6.5CVSS6.5AI score0.02242EPSS
SaveExploits1References3
exploitpack
exploitpack
added 2017/06/21 12:0 a.m.25 views

Microsoft Windows - IOCTL_VOLUME_GET_VOLUME_DISK_EXTENTS volmgr Pool Memory Disclosure

Microsoft Windows - IOCTLVOLUMEGETVOLUMEDISKEXTENTS volmgr Pool Memory Disclosure / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1154 We have discovered that the handler of the IOCTLVOLUMEGETVOLUMEDISKEXTENTS IOCTL in volmgr.sys discloses portions of uninitialized pool memory...

7.4AI score
SaveExploits0
FreeBSD
FreeBSD
added 2017/03/01 12:0 a.m.30 views

zziplib - multiple vulnerabilities

NIST reports by search in the range 2017/01/01 - 2018/07/06: 17 security fixes in this release: Heap-based buffer overflow in the zzipget32 function in fetch.c. Heap-based buffer overflow in the zzipget64 function in fetch.c. Heap-based buffer overflow in the zzipmementryextrablock function in...

6.5CVSS6.7AI score0.02801EPSS
SaveExploits17References1
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.35 views

Debian Security Advisory DSA 769-1 (gaim)

The remote host is missing an update to gaim announced via advisory DSA 769-1. Szymon Zygmunt and Michal Bartoszkiewicz discovered a memory alignment error in libgadu from ekg, console Gadu Gadu client, an instant messaging program which is included in gaim, a multi-protocol instant messaging...

5CVSS7.3AI score0.02323EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.24 views

Debian: Security Advisory (DSA-769-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6AI score0.02323EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.27 views

Debian: Security Advisory (DSA-1318-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6AI score0.02323EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.32 views

Debian Security Advisory DSA 1318-1 (ekg)

The remote host is missing an update to ekg announced via advisory DSA 1318-1. OpenVAS Vulnerability Test $Id: deb13181.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1318-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

5CVSS0.5AI score0.02323EPSS
SaveExploits0
Rows per page
Query Builder