117 matches found
PT-2022-34979 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.3 Description: A potential resource leak was identified in the ssip pn open function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
Linux kernel cm4000_cs.c competition condition vulnerability
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel 6.0.6 and earlier versions have a contention condition vulnerability that originates in drivers/char/pcmcia/cm4000cs.c when calling open if cmmopen and cm4000detach, an attacker can exploit...
PT-2025-52938
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak was identified in the ssip pn open function within the SSI protocol of the Linux kernel. Specifically, the function claims an HSI client's port using hsi claim port. If h...
PT-2022-23228 · Fdkaac +4 · Fdkaac +4
Name of the Vulnerable Software and Affected Versions: fdkaac affected versions not specified Description: A floating point exception FPE issue was discovered in fdkaac via the wav open function at /src/wav reader.c. Recommendations: At the moment, there is no information about a newer version th...
PT-2022-12155 · Fis +3 · Fis Gt.M +3
Name of the Vulnerable Software and Affected Versions: FIS GT.M versions through V7.0-000 Description: An issue was discovered related to a lack of NULL checks in calls to ious open in sr unix/ious open.c, allowing attackers to crash the application by dereferencing a NULL pointer. Recommendation...
CVE-2021-45941
libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 8 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...
PT-2021-6133 · Vim +6 · Vim +6
Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to a Use After Free condition in the vim text editor, specifically in the ex open function located in src/ex docmd.c. This condition may allow an attacker to impact the...
DEBIAN-CVE-2021-25804
A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service DOS in the application...
The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client encryption protection tool allows a intruder to disclose the protected information.
The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client cryptographic security device is related to the open IPC function. Exploiting this vulnerability can allow a attacker to disclose the protected information...
kernel: possible use-after-free due to a race condition in cdev_get of char_dev.c
A use-after-free flaw was found in the way the Linux kernel's filesystem subsystem handled a race condition in the chrdevopen function. This flaw allows a privileged local user to starve the resources, causing a denial of service or potentially escalating their privileges. The highest threat from...
PT-2021-6810 · Videolan +3 · Vlc Media Player +3
Name of the Vulnerable Software and Affected Versions: VLC Media Player version 3.0.11 Description: The issue is related to a NULL-pointer dereference in the Open function within the avi.c file of the VLC Media Player. This can cause a denial of service DOS in the application, allowing a remote...
The vulnerability of the Open function in the modules/demux/wav.c file of the Media Player software VideoLAN VLC allows a hacker to execute arbitrary code.
The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/wav.c file is related to numerical processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted .WAV file...
The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/tta.c file allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/tta.c file is related to numerical processing errors. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...
CVE-2017-1000418
The WildMidiOpen function in WildMIDI since commit d8a466829c67cacbb1700beded25c448d99514e5 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...
CVE-2018-20540
There is memory leak at liblas::Open liblas/liblas.hpp in libLAS 1.8.1...
libLAS Memory Disclosure Vulnerability
libLAS is a C/C++ library for reading and writing the common LAS LiDAR format. A memory leak vulnerability exists in libLAS 1.8.1 in liblas::Open liblas/liblas.hpp. No details of the vulnerability are provided at this time...
thor ruby gem command injection vulnerability
The thor ruby gem is a toolkit for building command-line applications. A command injection vulnerability exists in the thor ruby gem, which stems from the use of the open-uri 'open' function in Thor::Actionsget. An attacker could exploit this vulnerability to execute system commands...
UBUNTU-CVE-2017-1000418
The WildMidiOpen function in WildMIDI since commit d8a466829c67cacbb1700beded25c448d99514e5 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...
UBUNTU-CVE-2017-11697
The hashopen function in hash.c:229 in Mozilla Network Security Services NSS allows context-dependent attackers to cause a denial of service floating point exception and crash via a crafted cert8.db file...
PT-2017-11931 · Xiph.Org +2 · Vorbis-Tools +2
Name of the Vulnerable Software and Affected Versions: vorbis-tools version 1.4.0 Description: The issue allows remote attackers to cause a denial of service, specifically a memory allocation error, by using a crafted wav file. This is related to the wav open function in oggenc/audio.c...