Lucene search
+L

2656 matches found

CNVD
CNVD
added 2021/04/01 12:0 a.m.9 views

Redis Labs Redis Multiple Products Buffer Overflow Vulnerability

Redis Labs Redis is the United States Redis Labs, Inc. of a set of open-source use of ANSI C written to support the network , can be based on the memory can also be a persistent log-type , key-value Key-Value storage database , and provides a variety of languages API. A buffer overflow...

5.3CVSS7.1AI score0.01144EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/31 2:15 p.m.14 views

CVE-2021-3470

A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use...

5.3CVSS6.8AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/03/31 2:15 p.m.7 views

CVE-2021-3470

A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use...

5.3CVSS6.3AI score0.01144EPSS
SaveExploits0References2
Prion
Prion
added 2021/03/31 2:15 p.m.14 views

Heap overflow

A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use...

5CVSS5.5AI score0.01144EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2021/03/31 2:15 p.m.19 views

CVE-2021-3470

A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use...

5.3CVSS6.4AI score0.01144EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2021/03/31 1:44 p.m.69 views

CVE-2021-3470

A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use...

5.3CVSS5.7AI score0.01144EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2021/03/31 1:44 p.m.96 views

CVE-2021-3470

A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use...

5.3CVSS5.7AI score0.01144EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2021/03/26 6:59 p.m.23 views

CVE-2021-3470

A heap overflow issue was found in Redis when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use jemalloc or glibc...

5.3CVSS5.9AI score0.01144EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/03/11 12:0 a.m.29 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : spice Vulnerability (NS-SA-2021-0040)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has spice packages installed that are affected by a vulnerability: - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPI...

6.6CVSS7.6AI score0.02656EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:0 a.m.28 views

NewStart CGSL MAIN 6.02 : spice-gtk Vulnerability (NS-SA-2021-0075)

The remote NewStart CGSL host, running version MAIN 6.02, has spice-gtk packages installed that are affected by a vulnerability: - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE clien...

6.6CVSS7.6AI score0.02656EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:0 a.m.31 views

NewStart CGSL MAIN 6.02 : spice Vulnerability (NS-SA-2021-0075)

The remote NewStart CGSL host, running version MAIN 6.02, has spice packages installed that are affected by a vulnerability: - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client...

6.6CVSS7.6AI score0.02656EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/02/04 12:0 a.m.16 views

EulerOS 2.0 SP5 : spice (EulerOS-SA-2021-1232)

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Bot...

6.6CVSS7.5AI score0.02656EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/01/11 12:0 a.m.77 views

EulerOS Virtualization 3.0.2.6 : qemu (EulerOS-SA-2021-1057)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Quick Emulator Qemu built with the VirtFS, host directory sharing via Plan 9 File System9pfs support, is vulnerable to an improper...

10CVSS7.6AI score0.16658EPSS
SaveExploits7References18
OSV
OSV
added 2020/12/21 4:15 p.m.3 views

CVE-2020-3999

VMware ESXi 7.0 prior to ESXi70U1c-17325551, VMware Workstation 16.x prior to 16.0 and 15.x prior to 15.5.7, VMware Fusion 12.x prior to 12.0 and 11.x prior to 11.5.7 and VMware Cloud Foundation contain a denial of service vulnerability due to improper input validation in GuestInfo. A malicious...

6.5CVSS6.6AI score0.00349EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/12/07 12:0 a.m.8 views

QEMU msix_table_mmio_write() buffer overflow vulnerability

QEMU is a suite of analog processor software. A buffer overflow vulnerability exists in QEMU msixtablemmiowrite. An attacker could exploit the vulnerability to crash the QEMU process on the host, resulting in a denial of service...

6CVSS6.4AI score0.0036EPSS
SaveExploits0References1
NVD
NVD
added 2020/11/19 12:15 a.m.9 views

CVE-2019-12412

A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remote attacker could send a request causing a process crash which could lead to a denial of service attack...

7.5CVSS7.3AI score0.03941EPSS
SaveExploits0References2
OSV
OSV
added 2020/11/19 12:15 a.m.1 views

DEBIAN-CVE-2019-12412

A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remote attacker could send a request causing a process crash which could lead to a denial of service attack...

7.5CVSS6.7AI score0.03941EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/19 12:15 a.m.10 views

CVE-2019-12412

A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remote attacker could send a request causing a process crash which could lead to a denial of service attack...

7.5CVSS7.3AI score
SaveExploits0References2
Cvelist
Cvelist
added 2020/11/18 11:16 p.m.16 views

CVE-2019-12412

A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remote attacker could send a request causing a process crash which could lead to a denial of service attack...

7.2AI score0.03941EPSS
SaveExploits0References2
CVE
CVE
added 2020/11/18 11:16 p.m.105 views

CVE-2019-12412

CVE-2019-12412 affects libapreq2 versions 2.07–2.13, where the multipart parser can dereference a null pointer, causing a process crash and a potential denial-of-service. Exploitation is described as remote via crafted HTTP requests. Public references include Ubuntu USN advisories (USN-4558-1 for...

7.5CVSS7.1AI score0.03941EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder