Advisory ROSA-SA-2021-1917

Software: memcached 1.4.15 OS: Cobalt 7.9 CVE-ID: CVE-2017-9951 CVE-Crit: HIGH CVE-DESC: The tryreadcommand function in memcached.c in memcached prior to version 1.4.39 allows remote attackers to cause a denial of service segmentation error with an add / set key request, which allows to compare...

Advisory ROSA-SA-2021-1891

Software: libsolv 0.6.34 OS: Cobalt 7.9 CVE-ID: CVE-2019-20387 CVE-Crit: HIGH CVE-DESC: repodataschema2id in repodata.c in libsolv before version 0.7.6 has an excessive heap-based buffer read due to the last schema being less than the length of the input schema. CVE-STATUS: default CVE-REV: defau...

CVE-2020-36400

ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcpread, a different vulnerability than CVE-2021-20235...

CVE-2021-36089

Grok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress::applypaletteclr called from grk::FileFormatDecompress::applyColour...

CVE-2021-34382

Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tzmapsharedmem function where an integer overflow on the size parameter causes the request buffer and the logging buffer to overflow, allowing writes to arbitrary addresses within the kernel...

Weidmueller Industrial WLAN devices remote code execution vulnerability

Weidmueller Industrial WLAN devices is an industrial WIAN from Weidmueller, Germany. A remote code execution vulnerability exists in Weidmueller Industrial WLAN devices, which stems from a specially crafted username entry that could lead to an error message buffer overflow that could be exploited...

IBM Security Sevret Server Buffer Overflow Vulnerability

IBM Security Secret Server is a set of privileged access management solutions from IBM USA. The product supports password management, privileged account identification and privileged session access monitoring and logging. IBM Security Secret Server suffers from a buffer overflow vulnerability tha...

Updated openjpeg2 packages fix a security vulnerability

A heap-based buffer overflow was found in openjpeg. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg CVE-2021-3575...

Daniel Kamil Kozar tsMuxer buffer overflow vulnerability (CNVD-2021-49065)

tsMuxer is a transport stream multiplexing and TS encapsulation tool. A buffer overflow vulnerability exists in tsMuxer version 2.6.16. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

Heap Overflow Vulnerability in DocuCom PDF Reader of Beijing Zhenan Xinyu Technology Co. Ltd (CNVD-2021-46712)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. Ltd. A heap overflow vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

Heap Overflow Vulnerability in DocuCom PDF Reader of Beijing Zhenan Xinyu Technology Co. Ltd (CNVD-2021-46711)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. Ltd. A heap overflow vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

Zephyr Buffer Overflow Vulnerability

Zephyr is an open source, small, scalable real-time operating system. A security vulnerability exists in Zephyr versions = v1.14.2 and = v2.2.0 that stems from incorrect input frame validation in ieee802154 processing. No detailed vulnerability details are currently available...

Heap Overflow Vulnerability in DocuCom PDF Reader of Beijing Zhenan Xinyu Technology Co. Ltd (CNVD-2021-46709)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. Ltd. A heap overflow vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

RIOT Buffer Overflow Vulnerability (CNVD-2021-44275)

RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. RIOT suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

RIOT Buffer Overflow Vulnerability (CNVD-2021-44276)

RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. RIOT suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

SUSE-SU-2021:14749-1 Security update for apache2

This update for apache2 fixes the following issues: - fixed CVE-2021-30641 bsc1187174: MergeSlashes regression - fixed CVE-2020-35452 bsc1186922: Single zero byte stack overflow in modauthdigest...

D-Link DIR-2640-US Buffer Overflow Vulnerability

The D-Link DIR-2640-US is a smart AC2600 high power Wi-Fi Gigabit router. A buffer overflow vulnerability exists in the D-Link DIR-2640-US version 1.01B04. An attacker can exploit this vulnerability by overriding a global variable in a .bss segment to cause a process crash or change...

The vulnerability of the nginx HTTP-server’s range filter module allows attackers to disclose sensitive information.

The vulnerability of the nginx HTTP server’s range filter module is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to disclose sensitive information through a specially crafted request...

OpenText Brava! 缓冲区错误漏洞

OpenText Brava! Desktop is a browser-based universal document viewer from OpenText Opentext Canada. The product supports viewing, annotating and editing many types of documents. A security vulnerability exists in OpenText Brava! Desktop that stems from the program's lack of proper validation of...

JerryScript Heap Buffer Overflow Vulnerability

JerryScript is a lightweight JavaScript engine . A heap buffer overflow vulnerability exists in reparsecharescape in re-parser.c in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...