5404 matches found
EulerOS 2.0 SP5 : openssl111d (EulerOS-SA-2021-2668)
According to the versions of the openssl111d packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In order to decrypt SM2 encrypted data an application is expected to call the API function EVPPKEYdecrypt. Typically an application will ca...
EulerOS 2.0 SP5 : openssl098e (EulerOS-SA-2021-2667)
According to the versions of the openssl098e package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a fie...
openssl: Read buffer overruns processing ASN.1 strings
It was found that openssl assumed ASN.1 strings to be NUL terminated. A malicious actor may be able to force an application into calling openssl function with a specially crafted, non-NUL terminated string to deliberately hit this bug, which may result in a crash of the application, causing a...
The vulnerability of the Fatek Automation Communication Server arises from operations that go beyond the buffer boundaries in memory, allowing attackers to cause service failures or execute arbitrary code.
The vulnerability of the Fatek Automation Communication Server lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code by sending specially crafted requests...
The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco Small Business 220 router software allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Small Business 220 router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary...
AZL-79102 CVE-2021-41771 affecting package golang 1.25.7-1
ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation...
Amazon Linux 2 : openssl (ALAS-2021-1721)
The version of openssl installed on the remote host is prior to 1.0.2k-19. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1721 advisory. It was found that openssl assumed ASN.1 strings to be NUL terminated. A malicious actor may be able to force an application into...
The vulnerability of the QEMU hardware emulation API, related to writing beyond the buffer boundaries, allows a hacker to trigger a service failure.
The vulnerability of the QEMU hardware emulation API is related to an initialization error in the memory region cache. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the reading mode in Google Chrome’s web browser involves writing beyond the buffer in memory, allowing an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Google Chrome web browser’s reading mode is related to writing beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a specially created...
The vulnerability of the TabStrip control element in Google Chrome web browsers involves an operation that goes beyond the acceptable buffer data limit. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the TabStrip control element in Google Chrome browsers relates to the execution of operations that exceed the allowed buffer data limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service...
CLSA-2021-1635459208 Fix CVE(s): CVE-2021-25217
SECURITY UPDATE: buffer overrun in common code parseX - debian/patches/CVE-2021-25217.patch: fix incorrect order of operations in common/parse.c. - CVE-2021-25217...
F5 Networks BIG-IP : OpenSSL vulnerability (K19559038)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K19559038 advisory. ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the...
Adobe After Effects 缓冲区错误漏洞
Adobe After Effects "AE" is a graphics video processing software from Adobe for organizations involved in design and video special effects, including television stations, animation production companies, personal post-production studios, and multimedia studios. Effects 18.4.1 and earlier versions...
The vulnerability in the `hw/net/tulip.c` component of the QEMU hardware emulation software involves writing beyond the buffer boundaries. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability in the hw/net/tulip.c component of the QEMU hardware emulation software involves writing beyond the buffer boundaries during copy operations for TX/RX data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, a...
The vulnerability of the Media Feeds component in the Google Chrome web browser involves an operation that goes beyond the acceptable data buffer limits. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Media Feeds component in the Google Chrome web browser relates to the execution of operations beyond the allowed data buffer limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service...
The vulnerability of the library for reading, creating, and editing DjVu files, DjVuLibre, is related to reading data beyond the allowed buffer limits, allowing an intruder to cause a service failure.
The vulnerability of the library for viewing, creating, and editing DjVu files in DjVuLibre is related to the lack of checks for zero bytes. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the History component in the Google Chrome web browser, related to writing beyond the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the History component in the Google Chrome web browser is related to writing beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a special...
The vulnerability of the filter_intra component in the Ffmpeg library, related to writing beyond the buffer boundary, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the filterintra component in the Ffmpeg library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the WebAudio component in the Google Chrome web browser, related to the occurrence of operations beyond the buffer boundaries in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the WebAudio component in the Google Chrome web browser is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptio...