210 matches found
SUSE CVE-2020-36476
An issue was discovered in Mbed TLS before 2.24.0 and before 2.16.8 LTS and before 2.7.17 LTS. There is missing zeroization of plaintext buffers in mbedtlssslread to erase unused application data from memory...
SUSE CVE-2022-4450
The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" e.g. "CERTIFICATE", any header data and the payload data. If the function succeeds then the "nameout", "header" and "data" arguments are populated with pointers to buffers containing the relevant decoded data...
CVE-2022-39040
aEnrich a+HRD log read function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...
cURL Logical Error DoS
The vulnerability of the command-line tool cURL is related to a logical error in the reused descriptor during the processing of subsequent HTTP requests like PUT and POST. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects on the system by using...
PT-2022-7536
Name of the Vulnerable Software and Affected Versions HDF5 versions 1.13.3 and earlier HDF5 versions 1.14.2 and earlier Description The issue is related to a buffer overflow in the H5HG cache heap deserialize function of the HDF5 library, which can lead to a denial of service or potential code...
UBUNTU-CVE-2021-33646
The thread function doesn’t free a variable t-thbuf.gnulongname after allocating memory, which may cause a memory leak...
PT-2022-10279 · Alt Linux +7 · Alt Linux +7
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to the th read function, which does not free the variable t-th buf.gnu longname after allocating memory. This may cause a memory...
PT-2022-10278
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to the th read function, which does not free a variable t-th buf.gnu longlink after allocating memory. This may cause a memory leak...
UBUNTU-CVE-2022-30634
Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 32 - 1 bytes...
PT-2022-29559
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to a crash in the smtcfb read function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.17.2,...
GDAL 缓冲区错误漏洞
GDAL is an open source geospatial data abstraction library. A buffer error vulnerability exists in GDAL that stems from the product's PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment functions failing to correctly determine memory boundaries when calling...
DEBIAN-CVE-2021-45292
The gfisomhintrtpread function in GPAC 1.0.1 allows attackers to cause a denial of service Invalid memory address dereference via a crafted file in the MP4Box command...
PT-2021-24226 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue allows attackers to cause a denial of service due to an invalid memory address dereference. This can be achieved via a crafted file in the MP4Box command, specifically exploiting the gf isom hint rtp...
PT-2021-8181
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the tps6598x block read function in the Linux kernel's typec component. It can be exploited by calling tps6598x block read with a higher than allowed length,...
CVE-2021-33287
In NTFS-3G versions 2021.8.22, when specially crafted NTFS attributes are read in the function ntfsattrpreadi, a heap buffer overflow can occur and allow for writing to arbitrary memory or denial of service of the application...
Information Disclosure
hdf5 is vulnerable to information disclosure. The vulnerability exists due to a heap-based buffer over-read in the function H5Olinkdecode in H5Olink.c...
Samsung SMR MAY-2021 缓冲区错误漏洞
The Samsung libsapeextractor library is a component of Samsung Samsung mobile devices. The Samsung libsapeextractor library suffers from an input validation error vulnerability that stems from faulty input validation logic in scmn mfal read in the libsapeextractor library, which can be exploited ...
CVE-2021-30045
SerenityOS 2021-03-27 contains a buffer overflow vulnerability in the EndOfCentralDirectory::read function...
