Lucene search
+L

34 matches found

OSV
OSV
added 2025/06/09 8:15 p.m.11 views

AZL-63854 CVE-2025-5917 affecting package libarchive for versions less than 3.6.1-7

A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...

5CVSS6.4AI score0.00183EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/09 8:15 p.m.11 views

AZL-63818 CVE-2025-5917 affecting package cmake for versions less than 3.21.4-20

A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...

5CVSS6.4AI score0.00183EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/09 8:15 p.m.10 views

AZL-63777 CVE-2025-5917 affecting package libarchive for versions less than 3.7.7-3

A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to...

5CVSS7.1AI score0.00183EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/21 1:47 p.m.19 views

CLSA-2024-1732196856 Fix CVE(s): CVE-2024-52533

SECURITY UPDATE: Buffer overflow - debian/patches/CVE-2024-52533.patch: Fix a single byte buffer overflow in connect messages in gsocks4aproxy - CVE-2024-52533...

9.8CVSS7.2AI score0.01254EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/12/24 12:00 a.m.17 views

PT-2023-31889 · Unknown · Microhttpserver

Name of the Vulnerable Software and Affected Versions: MicroHttpServer versions through a8ab029 Description: The issue allows a one-byte recv buffer overflow via a long URI in the ParseHeader function located in lib/server.c. Recommendations: For versions through a8ab029, consider restricting...

9.8CVSS9.5AI score0.00701EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:09 a.m.13 views

SUSE CVE-2019-14323

SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte. This results in a crash of the server, but only when strict stack checking is enabled. This is caused by an off-by-one error in ssdprecv in ssdpd.c...

7.5CVSS7.7AI score0.01652EPSS
SaveExploits1References2
OSV
OSV
added 2019/11/09 1:15 p.m.12 views

UBUNTU-CVE-2019-18840

In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer overflow inside the DecodedCert structure in GetName in wolfcrypt/src/asn.c because the domain name location...

7.5CVSS6.1AI score0.01972EPSS
SaveExploits1References3
OSV
OSV
added 2019/04/28 4:29 p.m.8 views

DEBIAN-CVE-2019-11579

dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHOOPTSOVERLOADED...

5.3CVSS7.1AI score0.01414EPSS
SaveExploits0References1
OSV
OSV
added 2019/04/28 4:29 p.m.9 views

UBUNTU-CVE-2019-11579

dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHOOPTSOVERLOADED...

5.3CVSS5.8AI score0.01414EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2018/10/30 10:43 a.m.9 views

libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c

XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow...

9.8CVSS7.9AI score0.05907EPSS
SaveExploits0References4
OSV
OSV
added 2018/08/01 11:29 p.m.8 views

DEBIAN-CVE-2015-9262

XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow...

9.8CVSS9.3AI score0.05907EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2009/05/25 12:00 a.m.13 views

Fedora Core 10 FEDORA-2009-5191 (nsd)

The remote host is missing an update to nsd announced via advisory FEDORA-2009-5191. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

7.4AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2009/05/25 12:00 a.m.11 views

Fedora Core 9 FEDORA-2009-5190 (nsd)

The remote host is missing an update to nsd announced via advisory FEDORA-2009-5190. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

7.4AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2009/05/20 12:00 a.m.22 views

Fedora 10 : nsd-3.2.2-2.fc10 (2009-5191)

Security release. A one-byte overflow bug allows a carefully crafted exploit to bring down your DNS server. It is highly unlikely that this one byte overflow can lead to other system exploits. http://www.nlnetlabs.nl/publications/NSDvulnerabilityannouncement.ht ml Note that Tenable Network Securi...

5.5AI score
SaveExploits0References2
Rows per page
Query Builder