109 matches found
The vulnerability of the CODESYS Runtime Toolkit execution environment arises from overflowing buffers in dynamic memory, allowing attackers to trigger a service failure or reallocate memory areas.
The vulnerability of the CODESYS Runtime Toolkit execution environment is due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure or reallocate memory by sending a specially crafted request...
The vulnerability of the `package_set_ring` function in the `net/packet/af_packet.c` component of the Linux kernel allows a hacker to increase their privileges within the system or cause a service failure.
The vulnerability of the packagesetring function in the net/packet/afpacket.c component of the Linux kernel is related to the reallocation of memory. Exploiting this vulnerability could allow a remote attacker to increase their privileges within the system or cause service failures...
The vulnerability of the libxslt library in iOS, iPadOS, tvOS, watchOS, and macOS allows attackers to execute arbitrary code on the target system.
The vulnerability of the libxslt library in iOS, iPadOS, tvOS, watchOS, and macOS relates to the reallocation of memory. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system using a specially created malicious file...
The vulnerability of the OpenLDAP protocol, related to the reallocation of memory, allows a hacker to perform a denial-of-service attack.
The vulnerability of the OpenLDAP protocol is related to the reclamation of memory. Exploiting this vulnerability allows a malicious actor to perform a service denial by sending a specially crafted request to slapd...
The vulnerability of the OpenLDAP protocol, related to the reallocation of memory, allows a hacker to perform a denial-of-service attack.
The vulnerability of the OpenLDAP protocol lies in the repeated memory release that occurs during the processing of control elements involving value return filters. Exploiting this vulnerability allows a malicious actor to perform a denial-of-service attack by sending a specially crafted request ...
The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack, related to the repeated memory release, allows a attacker to cause a service failure.
The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack is related to the reallocation of memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...
CVE-2013-7491
An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated...
CVE-2013-7491
CVE-2013-7491 affects the Perl DBI module prior to 1.628. The issue is a stack corruption that occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack is reallocated. Impact is described as potential memory corruption related to stack handling; exploitation ...
The vulnerability of the ReadableStream component in Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, relates to the reallocation of memory areas. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the ReadableStream component in Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, is related to the reallocation of memory areas. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity,...
PYSEC-2020-81
libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...
The vulnerability of the Libarchive library for working with archives, related to double memory release, allows a perpetrator to trigger a service failure.
The vulnerability of the library for working with Libarchive archives libarchive/archivereadsupportformatrar.c is related to an error in the RAR format decoder, which causes resources in memory to be re-allocated. Exploiting this vulnerability could allow a remote attacker to cause service...
LAquis SCADA LGX Report Memory ReAlloc Untrusted Pointer Dereference Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
UBUNTU-CVE-2017-16796
In SWFTools 0.9.2, the pngload function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service invalid write and application crash or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file...
openssh: Leak of host private key material to privilege-separated child process via realloc()
It was found that the host private key material could possibly leak to the privilege-separated child processes via re-allocated memory. An attacker able to compromise the privilege-separated process could therefore obtain the leaked key information...
The vulnerability of the OpenSSH cryptographic protection mechanism, which allows a hacker to gain access to the protected information
The vulnerability in authfile.c of the sshd component of the OpenSSH cryptographic protection mechanism is related to the improper handling of the effect of implementing block memory reallocation functions. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to...
Microsoft Internet Explorer 9 - MSHTML CAttrArray Use-After-Free (MS14-056)
oTextArea = document.createElement'textarea'; oTextArea.dataSrc = 1; oTextArea.id = 1; oTextArea.innerHTML = 1; oTextArea.onvolumechange = 1; oTextArea.style.setProperty'list-style', "url"; !-- Analysis The CAttrArray object initially allocates a CImplAry buffer of 0x40 bytes, which can store 4...
Microsoft Internet Explorer 9 - MSHTML CAttrArray Use-After-Free (MS14-056)
Microsoft Internet Explorer 9 - MSHTML CAttrArray Use-After-Free MS14-056 oTextArea = document.createElement'textarea'; oTextArea.dataSrc = 1; oTextArea.id = 1; oTextArea.innerHTML = 1; oTextArea.onvolumechange = 1; oTextArea.style.setProperty'list-style', "url"; !-- Analysis The CAttrArray objec...
Debian DLA-668-1 : libass security update
Several vulnerabilities were discovered in libass, a library for manipulating the SubStation Alpha SSA subtitle file format. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2016-7969 Mode 0/3 line wrapping equalization in specific cases which could result in...
The vulnerability of the FreeBSD operating system allows a hacker to trigger a service failure or increase their privileges.
The vulnerability of the sockargs function sys/kern/uipcsyscalls.c in the FreeBSD operating system is caused by a buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker acting locally to cause a service failure memory reallocation and kernel errors, or to increase...
The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure or cause other adverse effects
The vulnerability of the dsaprivdecode function crypto/dsa/dsaameth.c in the OpenSSL library is related to the reallocation of memory. Exploiting this vulnerability allows a remote attacker to cause a service failure or other effects such as memory corruption by using an altered private DSA key...