3856 matches found
CVE-2023-46853
In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n...
Code injection
In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n...
UBUNTU-CVE-2023-46853
In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n...
CVE-2023-46853
Summary (CVE-2023-46853) Memcached prior to 1.6.22 is affected by an off‑by‑one error when processing proxy requests in proxy mode if \n is used instead of \r\n. This vulnerability is documented across multiple advisories (e.g., ALAS2023-2023-449, Photon OS advisories, TencentOS/Tenable plugins)....
CVE-2023-46853
In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n...
CVE-2023-46853
In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n...
CVE-2023-46853
In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n...
PT-2023-7068 · Memcached +5 · Memcached +5
Name of the Vulnerable Software and Affected Versions: Memcached versions prior to 1.6.22 Description: The issue is related to an off-by-one error when processing proxy requests in proxy mode, specifically if is used instead of r . This error can be exploited by a remote attacker to execute...
Memcached Security Vulnerabilities
Memcached is the United States Brad Fitzpatrick Brad Fitzpatrick individual developers of a high-performance distributed memory object caching system. The system reduces the number of database reads by caching data and objects in memory, thus increasing the speed of website access. A security...
CVE-2023-46853
In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n...
Exploit for Off-by-one Error in F5 Nginx
CVE-2021-23017 CVE-2021-23017-PoC python3 poc.py --ta...
CVE-2023-45678 Off-by-one heap buffer write in start_decoder in stb_vorbis
stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buffer write in startdecoder because at maximum m-submaps can be 16 but submapfloor and submapresidue are declared as arrays of 15 elements. This issue may lead to code execution...
CVE-2023-4260
Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system...
CVE-2023-4260
CVE-2023-4260 concerns Zephyr’s fuse file system. The available connected sources describe a potential off‑by‑one buffer overflow in the fuse filesystem, with the issue rooted in that component and the impact stated as high across confidentiality, integrity, and availability in the NVD entry. The...
CVE-2023-4260 Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem
Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system...
Important: nginx
Issue Overview: A flaw was found in nginx. An off-by-one error while processing DNS responses allows a network attacker to write a dot character out of bounds in a heap allocated buffer which can allow overwriting the least significant byte of next heap chunk metadata likely leading to a remote...
CLSA-2023-1695406987 libtasn1: Fix of CVE-2021-46848
CVE-2021-46848: Fix ETYPEOK off by one array size check...
Amazon Linux 2 : elfutils (ALAS-2023-2259)
"The version of elfutils installed on the remote host is prior to 0.176-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2259 advisory. The libcpu component which is used by libasm of elfutils version 0.177 git 47780c9e, suffers from denial-of-service vulnerability...
Medium: elfutils
Issue Overview: The libcpu component which is used by libasm of elfutils version 0.177 git 47780c9e, suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write CWE-787, off-by-one error CWE-193 and reachable assertion CWE-617; to exploit the vulnerabilit...
