Rust Buffer Overflow Vulnerability (CNVD-2021-17258)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in quinn crate before 0.7.0 for Rust, which stems from having invalid memory access to certain versions of the standard library. No details of the vulnerability are current...

Siemens Solid Edge Viewer PAR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Rust Buffer Overflow Vulnerability (CNVD-2021-17261)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in bytestruct crate before 0.6.1 for Rust, which stems from a problem with the deserialization method that results in the loss of uninitialized memory. No details of the...

F5 Networks BIG-IP : TMM buffer-overflow vulnerability (K56715231)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.5.3 / 13.1.3.6 / 14.1.4 / 15.1.2.1 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K56715231 advisory. - On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1....

Security Advisory - Sudo Privilege Escalation Vulnerability

A heap-based buffer overflow vulnerability was found in the way sudo parses command line arguments. This flaw is exploitable by any authenticated, local user who can execute the sudo command. Successful exploitation of this flaw could lead to privilege escalation. Vulnerability ID:...

NewStart CGSL CORE 5.04 / MAIN 5.04 : python-pillow Vulnerability (NS-SA-2021-0038)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has python-pillow packages installed that are affected by a vulnerability: - libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow. CVE-2020-5313 Note that Nessus has not tested for this issue but has instead...

F5 Networks BIG-IP : Advanced WAF/ASM buffer-overflow vulnerability (K52510511)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.5.3 / 12.1.5.3 / 13.1.3.6 / 14.1.4 / 15.1.2.1 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K52510511 advisory. - On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before...

PT-2021-2406 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 12.1.x through 12.1.5.3 F5 BIG-IP versions 13.1.x through 13.1.3.6 F5 BIG-IP versions 14.1.x through 14.1.4 F5 BIG-IP versions 15.1.x through 15.1.2.1 F5 BIG-IP versions 16.0.x through 16.0.1.1 Description: The issue is...

EulerOS Virtualization 3.0.6.6 : dnsmasq (EulerOS-SA-2021-1469)

According to the versions of the dnsmasq packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in dnsmasq. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with...

Siemens SCALANCE and RuggedCmd Device Stack Overflow Vulnerability

SCALANCE SC-600 devices SC622-2C, SC632-2C, SC636-2C, SC642-2C, SC646-2C are used to protect trusted industrial networks from untrusted networks. SCALANCE M-800/S615 industrial routers are used for secure remote access to plants via mobilenetworks such as GPRS or UMTS for secure remote access to...

Huawei EulerOS: Security Advisory for gdb (EulerOS-SA-2021-1474)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MediaTek performance driver buffer overflow vulnerability

MediaTek performance driver is a performance driver from China MediaTek MediaTek. It provides performance optimization and repair features. A buffer overflow vulnerability exists in MediaTek performance driver, which stems from a lack of boundary checking and can be exploited by an attacker to...

Buffer Overflow Vulnerability in Zijin Bridge Monitoring and Configuration Software

Daqing Zijinqiao Software Technology Co., Ltd. is one of the earliest companies in China to develop large-scale domestic real-time database products. A buffer overflow vulnerability exists in Zijinqiao's monitoring and configuration software, which can be exploited by attackers to cause arbitrary...

MediaTek cameraisp 缓冲区错误漏洞

MediaTek cameraisp is an image processor from China's MediaTek Mediatek. It is used to improve the quality of pictures. A buffer overflow vulnerability exists in MediaTek cameraisp that can be exploited by an attacker to elevate privileges...

PT-2021-17045 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: faad2 versions prior to 2.2.7.1 faad in Synology DiskStation Manager DSM versions prior to 6.2.3-25426-3 Description: The issue is related to a stack-based buffer overflow vulnerability and the use of unmaintained third-party components. This...

UBUNTU-CVE-2021-20203

An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in Do...

Stack Overflow Vulnerability in EasyBuilder Pro

EasyBuilder Pro is a configuration software developed by Wyland. A stack overflow vulnerability exists in EasyBuilder Pro. An attacker could exploit this vulnerability to cause the program to crash...

Rust Buffer Overflow Vulnerability (CNVD-2021-13648)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in versions of Rust prior to 2021-02-04, which stems from xcb::xproto::changeproperty allowing out-of-bounds read operations. No detailed vulnerability details are provided...

Rust Buffer Overflow Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in versions of Rust prior to 0.17.0 that can be exploited by an attacker to overwrite a heap memory location...

PT-2021-2129

Name of the Vulnerable Software and Affected Versions: VMware ESXi versions 6.5 before ESXi650-202102101-SG VMware ESXi versions 6.7 before ESXi670-202102401-SG VMware ESXi versions 7.0 before ESXi70U1c-17325551 Description: VMware ESXi’s OpenSLP service contains a heap-overflow vulnerability. An...