GStreamer 缓冲区错误漏洞

GStreamer is the GStreamer open source set of frameworks for processing streaming media. GStreamer suffers from a buffer error vulnerability that stems from an out-of-bounds write detected in the gstparsevorbissetuppacket function in vorbisparse.c. The vulnerability is caused by the detection of ...

Malicious code in error-stack-parsersasasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95ee2924307d088b5e7509bfa51de2136a5611527d0de92d5ea4020f7ba0edf0 The OpenSSF Package Analysis project identified 'error-stack-parsersasasa' @ 1.2.7 npm as malicious. It is considered malicious because: - The...

USN-7146-1: Dogtag PKI vulnerabilities

Christina Fu discovered that Dogtag PKI accidentally enabled a mock authentication plugin by default. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates. This issue only affected Ubuntu 16.04 LTS. CVE-2017-753...

USN-7145-1 expat vulnerability

It was discovered that Expat did not properly handle its internal state when attempting to resume an unstarted parser. An attacker could use this issue to cause a denial of service application crash...

[SECURITY] Fedora 41 Update: python-python-multipart-0.0.19-1.fc41

Python-Multipart is a streaming multipart parser for Python...

[SECURITY] Fedora 40 Update: python-multipart-0.0.19-1.fc40

Python-Multipart is a streaming multipart parser for Python...

Inefficient Algorithmic Complexity

Overview league/commonmark is a PHP-based Markdown parser which supports the full CommonMark spec. It is based on the CommonMark JS reference implementation. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity through the parsing of specially crafted Markdown...

Malicious code in another-query-parser (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11296 Malicious code in another-query-parser (npm)

--- -= Per source details. Do not edit below this line.=-...

whapa 安全漏洞

Whapa is a WhatsApp parser toolset by the individual developer Ivan Moreno. A security vulnerability exists in whapa version v1.59, which stems from vulnerability to a command injection attack via a carefully crafted filename for the HTML reporting component...

flowlang (>=0.1.6, <=0.1.8), lavendeux-parser (>=0.3.0, <=0.8.1) +1 more potentially affected by unknown CVE via js-sandbox (0.1.6)

js-sandbox CARGO version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on js-sandbox and may be impacted: - flowlang =0.1.6, =0.3.0, =0.1.0, =0.6.1 Source cves: unknown CVE Source advisory: OSV:GHSA-4MW5-2636-4535...

CVE-2024-8748

A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmware versions through V5.50ABOM.8.4C0 could allow an attacker to cause a temporary denial of service DoS condition against the web management interface by sending a crafted HTTP...

gstreamer1-plugins-good -- multiple vulnerabilities

The GStreamer Security Center reports: 20 security bugs. CVE-2024-47537: Integer overflow in MP4/MOV sample table parser leading to out-of-bounds writes CVE-2024-47598: MP4/MOV sample table parser out-of-bounds read CVE-2024-47539: MP4/MOV Closed Caption handling out-of-bounds write CVE-2024-4754...

gstreamer1-plugins -- multiple vulnerabilities

The GStreamer Security Center reports: 3 security bugs. CVE-2024-47542: ID3v2 parser out-of-bounds read and NULL-pointer dereference CVE-2024-47600: Out-of-bounds read in gst-discoverer-1.0 commandline tool CVE-2024-47541: Out-of-bounds write in SSA subtitle parser...

CVE-2024-53981

python-multipart is a streaming multipart parser for Python. When parsing form data, python-multipart skips line breaks CR \r or LF \n in front of the first boundary and any tailing bytes after the last boundary. This happens one byte at a time and emits a log event each time, which may cause...

CVE-2024-53981 python-multipart has a Denial of service (DoS) via deformation `multipart/form-data` boundary

python-multipart is a streaming multipart parser for Python. When parsing form data, python-multipart skips line breaks CR \r or LF \n in front of the first boundary and any tailing bytes after the last boundary. This happens one byte at a time and emits a log event each time, which may cause...

CVE-2024-53981

CVE-2024-53981 affects Python package python-multipart, a streaming multipart parser. The issue occurs while parsing form data: the parser skips CR/LF line breaks in front of the first boundary and after the last boundary, emitting a log event for each byte processed. This can be abused by sendin...

CVE-2024-53108

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adjust VSDB parser for replay feature At some point, the IEEE ID identification for the replay check in the AMD EDID was added. However, this check causes the following out-of-bounds issues when using KASAN:...

AZL-54268 CVE-2024-53108 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adjust VSDB parser for replay feature At some point, the IEEE ID identification for the replay check in the AMD EDID was added. However, this check causes the following out-of-bounds issues when using KASAN:...

AZL-54265 CVE-2024-53108 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adjust VSDB parser for replay feature At some point, the IEEE ID identification for the replay check in the AMD EDID was added. However, this check causes the following out-of-bounds issues when using KASAN:...