CVE-2021-32795

ArchiSteamFarm is a C application with primary purpose of idling Steam cards from multiple accounts simultaneously. In versions prior to 4.3.1.0 a Denial of Service aka DoS vulnerability which allows attacker to remotely crash running ASF instance through sending a specifically-crafted Steam chat...

CVE-2021-32795 Denial of Service via Steam chat in ArchiSteamFarm

ArchiSteamFarm is a C application with primary purpose of idling Steam cards from multiple accounts simultaneously. In versions prior to 4.3.1.0 a Denial of Service aka DoS vulnerability which allows attacker to remotely crash running ASF instance through sending a specifically-crafted Steam chat...

FreeBSD : asterisk -- Remote Crash Vulnerability in PJSIP channel driver (ffa364e1-ebf5-11eb-aef1-0897988a1c07)

The Asterisk project reports : When Asterisk receives a re-INVITE without SDP after having sent a BYE request a crash will occur. This occurs due to the Asterisk channel no longer being present while code assumes it is. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

FreeBSD : asterisk -- Remote crash when using IAX2 channel driver (fb3455be-ebf6-11eb-aef1-0897988a1c07)

The Asterisk project reports : If the IAX2 channel driver receives a packet that contains an unsupported media format it can cause a crash to occur in Asterisk. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

DEBIAN-CVE-2021-36222

ecverify in kdc/kdcpreauthec.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation...

UBUNTU-CVE-2021-36222

ecverify in kdc/kdcpreauthec.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation...

The vulnerability of the ParseWave64HeaderConfig function in the wave64.c component of the WavPack audio codec, related to the use of previously uninitialized variables, allows a hacker to cause a service failure.

The vulnerability of the ParseWave64HeaderConfig function in the wave64.c component of the WavPack audio codec is related to the use of previously uninitialized variables. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a malicious .wav file...

The vulnerability of the ParseCaffHeaderConfig function in the caff.c component of the WavPack audio codec allows a hacker to cause a service failure. This vulnerability stems from the use of uninitialized variables, which can be exploited by attackers.

The vulnerability of the ParseCaffHeaderConfig function in the caff.c component of the WavPack audio codec is related to the use of previously uninitialized variables. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a malicious .wav file...

The vulnerability of the ParseDsdiffHeaderConfig function in the dsdiff.c component of the WavPack audio codec, related to division by zero, allows a attacker to cause a service failure.

The vulnerability of the ParseDsdiffHeaderConfig function in the dsdiff.c component of the WavPack audio codec is related to division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure using a malicious .wav file...

The vulnerability of the `ApplyEvaluateOperator()` function in the `/MagickCore/statistic.c` file of the ImageMagick console graphics editor allows a malicious actor to cause a service failure by exploiting a numerical overflow condition.

The vulnerability of the ApplyEvaluateOperator function in the /MagickCore/statistic.c file of the ImageMagick console graphics editor allows for integer overflow of values. Exploiting this vulnerability enables a remote attacker to cause a service failure using a specially created file...

MGASA-2021-0300 Updated nettle packages fix security vulnerabilities

Remote crash in RSA decryption via manipulated ciphertext CVE-2021-3580. A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with...

@agentlab/ldkg-ui-basetable (0.1.1), @agentlab/ldkg-ui-charts (>=0.1.2, <=0.1.7) +163 more potentially affected by CVE-2021-32640 via ws (>=5.0.0, <=5.2.2)

ws NPM version =5.0.0, =0.1.2, =0.3.7, =0.1.8, =1.0.0, =1.0.0, =1.0.17-beta, =1.3.6, =0.1.0, =3.0.0-alpha.1, =3.0.0-alpha.1, =1.0.21, =1.0.27 and more Source cves: CVE-2021-32640 Source advisory: OSV:GHSA-6FC8-4GX4-V693...

MikroTik RouterOS 代码问题漏洞

MikroTik RouterOS is a router operating system developed on Linux. A memory corruption vulnerability exists in MikroTik RouterOS /nova/bin/dot1x, which allows remote attackers to exploit the vulnerability by submitting a special request that can crash an application and conduct a denial of servic...

UBUNTU-CVE-2021-2146

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Options. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

USN-4906-1 nettle vulnerability

It was discovered that Nettle incorrectly handled signature verification. A remote attacker could use this issue to cause Nettle to crash, resulting in a denial of service, or possibly force invalid signatures...

asterisk -- Remote crash when using IAX2 channel driver

The Asterisk project reports: If the IAX2 channel driver receives a packet that contains an unsupported media format it can cause a crash to occur in Asterisk...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC firmware Web management page, which originates from a buffer overflow vulnerability due to a specific function not validating the length of a user-entered string. A remote attacker cou...

EulerOS Virtualization 2.9.1 : openldap (EulerOS-SA-2021-1618)

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. A...

USN-4759-1 glib2.0 vulnerabilities

Krzesimir Nowak discovered that GLib incorrectly handled certain large buffers. A remote attacker could use this issue to cause applications linked to GLib to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2021-27218 Kevin Backhouse discovered that GLib incorrect...

Huawei EulerOS: Security Advisory for openldap (EulerOS-SA-2021-1503)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...