openSUSE Security Update : openexr (openSUSE-2021-670)

This update for openexr fixes the following issues : - CVE-2021-23215: Fixed an integer-overflow in Imf25:DwaCompressor:initializeBuffers bsc1185216. - CVE-2021-26260: Fixed an Integer-overflow in Imf25:DwaCompressor:initializeBuffers bsc1185217. - CVE-2021-20296: Fixed a NULL pointer dereference...

GHSA-6VQP-H455-42MR Uncontrolled Memory Allocation in Apache PDFBox

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

Juniper Junos DoS (JSA11148)

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability as referenced in the JSA11148 advisory. On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB...

Security update for openexr (important)

openSUSE Security Update: Security update for openexr Announcement ID: openSUSE-SU-2021:0670-1 Rating: important References: 1184353 1184354 1184355 1185216 1185217 Cross-References: CVE-2021-20296 CVE-2021-23215 CVE-2021-26260 CVE-2021-3477 CVE-2021-3479 CVSS scores: CVE-2021-20296 NVD : 5.3...

SUSE-SU-2021:1489-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2021-23215: Fixed an integer-overflow in Imf25:DwaCompressor:initializeBuffers bsc1185216. - CVE-2021-26260: Fixed an Integer-overflow in Imf25:DwaCompressor:initializeBuffers bsc1185217. - CVE-2021-20296: Fixed a Null Pointer dereference ...

Denial Of Service (DoS)

xen is vulnerable to denial of service. An out-of-memory occurs when an unbounded queue of single threaded events are received faster than the thread is able to handle...

CVE-2021-0257

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge CE devices may cause memo...

Design/Logic Flaw

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge CE devices may cause memo...

CVE-2021-0257 Junos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge CE devices may cause memo...

CVE-2021-0257

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge CE devices may cause memo...

OESA-2021-1140 jackson-dataformats-binary security update

This module is a multi-module umbrella project for Jackson standard binary dataformat backends. Dataformat backends are used to support format alternatives to JSON, using general-purpose Jackson API. Formats included allow access using all 3 API styles streaming, databinding, tree model. Security...

PT-2021-8033 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the set fmt error handling in the Linux kernel's intel-ipu3 driver. If an error occurs during a set fmt, the previous sizes are overwritten with the invalid...

Apache PDFBox 安全漏洞

Apache PDFBox is the United States Apache Apache Foundation of a Java-based open source language tool library . The product provides PDF document creation and editing and other functions. Apache PDFBox has a security vulnerability that stems from the fact that a carefully crafted PDF file can...

PT-2021-17660 · Apache · Apache Pdfbox

Name of the Vulnerable Software and Affected Versions: Apache PDFBox versions 2.0.22 and prior 2.0.x versions Description: A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. Recommendations: For Apache PDFBox versions 2.0.22 and prior 2.0.x versions, update ...

Debian DLA-2582-1 : mqtt-client security update

A vulnerability was discovered in mqtt-client wher unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive. For Debian 9 stretch, this problem has been fixed in version 1.14-1+deb9u1. We recommend that you upgrade your mqtt-client packages. For the...

Denial Of Service (DoS)

jackson-dataformat-cbor is vulnerable to denial of service DoS. The vulnerability exists through the eager allocation of byte buffer that causes an out of memory error when a large len value is processed in finishBytes...

FasterXML Jackson Resource Management Error Vulnerability

FasterXML Jackson is a data processing tool for Java from FasterXML, Inc. A resource management error vulnerability exists in FasterXML Jackson. The vulnerability stems from a failure to check the buffer length in jackson-dataformat-cbor resulting in an OutOfMemoryError exception being thrown. Th...

PT-2021-7974 · Fasterxml +2 · Jackson Dataformat Cbor +2

Name of the Vulnerable Software and Affected Versions: com.fasterxml.jackson.dataformat:jackson-dataformat-cbor versions 0 through 2.11.4 com.fasterxml.jackson.dataformat:jackson-dataformat-cbor versions 2.12.0-rc1 through 2.12.1 Description: The issue is related to the allocation of unlimited...

Memory corruption

An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI backends consider certain errors a plain bug, deliberately causing a kernel crash. For errors potentially being at least under the influence of guests such as out of memory conditions, it isn'...

CVE-2021-26931

CVE-2021-26931 is a Linux kernel issue in Xen PV backend handling. Affected: kernel 2.6.39–5.10.16 when running Xen PV; vulnerable components include block/xen-blkback/blkback.c and xen-scsiback.c. Root cause: grant-mapping error handling could be treated as a plain bug, leading to a kernel crash...