MGASA-2021-0216 Updated openjpeg2 packages fix a security vulnerability

There is a flaw in the opj2compress program in openjpeg2. An attacker who is able to submit a large number of image files to be processed in a directory by opj2compress, could trigger a heap out-of-bounds write due to an integer overflow, which is caused by the large number of image files. The...

Huawei CloudEngine Buffer Overflow Vulnerability

Huawei CloudEngine 12800 and others are products of Huawei, China.Huawei CloudEngine 12800 is a 12800 series data center switch.Huawei Cloudengine 5800 is a 5800 series data center switch.Huawei Cloudengine 6800 is a 6800 series data center switch. Huawei CloudEngine has a buffer error...

Arbitrary Code Execution

unbound is vulnerable to arbitrary code execution. The vulnerability exists through an integer overflow in a size calculation in respip/respip.c. A flaw was found in unbound. An integer overflow in ubpackedrrsetkey function may lead to a buffer overflow of the allocated buffer if the size can be...

SUSE-SU-2021:1651-1 Security update for graphviz

This update for graphviz fixes the following issues: - CVE-2020-18032: Fixed possible remote code execution via buffer overflow bsc1185833...

Important: Red Hat Security Advisory: redis:6 security update

An update for the redis:6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Heap overflow

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bitreadB ../../src/bits.c:135...

Heap overflow

A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bitcalcCRC ../../src/bits.c:2213...

Exim buffer overflow vulnerability (CNVD-2021-34534)

Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. Exim suffers from a buffer overflow vulnerability. The vulnerability stems from a "-F" handling error in parsefixphrase. No details of the vulnerability are available at this tim...

Freeimage Parses Inventory in Integer Overflow Vulnerability

freeimage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . The Freeimage parsing library suffers from an integer overflow vulnerability, which can be exploited by...

CVE-2020-28020

Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishandling of continuation lines during header-length restriction...

OESA-2021-1167 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow ...

Tenda G1 and G3 Buffer Overflow Vulnerability (CNVD-2022-10753)

Tenda G1 and G3 is a router from Tenda, China. Tenda G1 and G3 is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to execute arbitrary code via a crafted action portMappingIndex request...

Buffer Overflow Vulnerability in Multiple Texas Instruments Products

Texas Instruments SimpleLink is an ultra-low power wireless microcontroller from Texas Instruments. A buffer overflow vulnerability in multiple Texas Instruments products can be exploited by an attacker to remotely execute code...

Rust buffer overflow vulnerability (CNVD-2021-33048)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in the Rust standard library prior to version 1.51.0, which stems from an unmet security requirement for the TrustedRandomAccess feature, an error that could result in a...

IBM Informix Dynamic Server Buffer Overflow Vulnerability (CNVD-2021-32619)

IBM Informix Dynamic Server is a scalable object-relational database server from IBM in the United States that provides clustered data centers with features such as continuous data availability and disaster recovery. A buffer overflow vulnerability exists in IBM Informix Dynamic Server that stems...

Adobe Photoshop suffers from a stack overflow vulnerability

Adobe Photoshop is an image processing software developed and distributed by Adobe. Adobe Photoshop suffers from a stack overflow vulnerability. An attacker could exploit this vulnerability to cause the program to crash...

PT-2021-4212 · Texas Instruments · Ti-Rtos

Name of the Vulnerable Software and Affected Versions: TI-RTOS versions affected versions not specified Description: The issue is caused by an integer overflow in the ti sysbios rts MemAlloc alloc function, which can allow an attacker to execute arbitrary code or cause a denial of service. When...

Unbound Integer Overflow Vulnerability

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the size calculation in respip/respip.c in versions of Unbound prior to 1.9.5. No detailed vulnerability details are provided at this time...

Unbound integer overflow vulnerability (CNVD-2021-32626)

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the size calculation in dnscrypt/dnscrypt.c in versions of Unbound prior to 1.9.5. No detailed vulnerability details are provided at this time...

Unbound integer overflow vulnerability (CNVD-2021-32620)

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the region allocator in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability to cause an integer overflow via regionalloc...