9364 matches found
EulerOS Virtualization 2.10.1 : libxml2 (EulerOS-SA-2023-1893)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option...
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow due to a segmentation violation in the findKeyParent function in PdfDictionary.cpp. Remediation Upgrade podofo to version 0.10.4 or higher. References - GitHub Commit - GitHub Issue...
Denial Of Service (DoS)
workerd is vulnerable to Denial of Service DoS attacks. The forEach function may wind up reading from the incorrect position in memory if a FormData object has more than 2^31 items, which would result in a segmentation fault, causing the application to crash...
Oracle Linux 9 : frr (ELSA-2023-2202)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2202 advisory. 8.3.1-5 - Resolves: 2147522 - It is not possible to run FRR as a non-root user 8.3.1-4 - Resolves: 2144500 - AVC error when reloading FRR with provided reload...
Buffer under-read in workerd
Impact Prior to version v1.20230419.0, the FormData API implementation was subject to an integer overflow. If a FormData instance contained more than 2^31 elements, the forEach method could end up reading from the wrong location in memory while iterating over elements. This would most likely lead...
K000134597: mod_auth_openidc vulnerability CVE-2023-28625
Security Advisory Description modauthopenidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when OIDCStripCookies is set and a crafted cookie supplied, a NULL pointer...
Integer overflow
Prior to version v1.20230419.0, the FormData API implementation was subject to an integer overflow. If a FormData instance contained more than 2^31 elements, the forEach method could end up reading from the wrong location in memory while iterating over elements. This would most likely lead to a...
CVE-2023-2512 Buffer under-read in workerd
Prior to version v1.20230419.0, the FormData API implementation was subject to an integer overflow. If a FormData instance contained more than 2^31 elements, the forEach method could end up reading from the wrong location in memory while iterating over elements. This would most likely lead to a...
CVE-2023-2512 Buffer under-read in workerd
Prior to version v1.20230419.0, the FormData API implementation was subject to an integer overflow. If a FormData instance contained more than 2^31 elements, the forEach method could end up reading from the wrong location in memory while iterating over elements. This would most likely lead to a...
CVE-2023-2512 Buffer under-read in workerd
Prior to version v1.20230419.0, the FormData API implementation was subject to an integer overflow. If a FormData instance contained more than 2^31 elements, the forEach method could end up reading from the wrong location in memory while iterating over elements. This would most likely lead to a...
CVE-2023-2512
CVE-2023-2512 affects Cloudflare workerd’s FormData API implementation prior to v1.20230419.0, where an integer overflow could occur if a FormData contains more than 2^31 elements. The forEach() iteration could read from the wrong memory location, potentially causing a segmentation fault and, in ...
Denial Of Services (DoS)
libpodofo.so is vulnerable to Denial Of Services DoS. The vulnerability exists due to the segmentation fault in the CreateFromObject function of PdfEncrypt.cpp, which allows an attacker to cause an application crash through the SIGSEGV error by providing a maliciously crafted pdf file...
SUSE CVE-2023-31555
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad...
SUSE CVE-2023-31556
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent...
UBUNTU-CVE-2023-31556
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent...
UBUNTU-CVE-2023-31555
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad...
PT-2023-23386 · Unknown · Podofoinfo
Name of the Vulnerable Software and Affected Versions: podofoinfo version 0.10.0 Description: A segmentation violation was discovered in podofoinfo via the function PoDoFo::PdfObject::DelayedLoad. Recommendations: For podofoinfo version 0.10.0, at the moment, there is no information about a newer...
PoDoFo 安全漏洞
PoDoFo is a free portable C++ library open-sourced by PoDoFo. A security vulnerability exists in PoDoFo version 0.10.0, which stems from the function PoDoFo::PdfObject::DelayedLoad containing a segmentation violation...
frr: out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service
A vulnerability was found in FRRouting. This issue occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c. An out-of-bounds read in the BGP daemon may lead to a segmentation fault and a denial of service...
