9374 matches found
MariaDB SQL注入漏洞
MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A security vulnerability exists in MariaDB Server v10.7 and lower, which stems from the discovery of a segmentation error contained via the compone...
Ruby -- Buffer overrun in String-to-Float conversion
piao reports: Due to a bug in an internal function that converts a String to a Float, some convertion methods like KernelFloat and Stringtof could cause buffer over-read. A typical consequence is a process termination due to segmentation fault, but in a limited circumstances, it may be exploitabl...
SUSE SLES15 Security Update : 389-ds (SUSE-SU-2022:1139-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1139-1 advisory. - A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDA...
SUSE: Security Advisory (SUSE-SU-2022:1129-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES12 Security Update : openjpeg2 (SUSE-SU-2022:1129-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1129-1 advisory. - The opjtgtreset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service out-of-bounds read and...
SUSE-SU-2022:1129-1 Security update for openjpeg2
This update for openjpeg2 fixes the following issues: - CVE-2016-1924: Fixed heap buffer overflow bsc980504. - CVE-2016-3183: Fixed out-of-bounds read in sycc422torgb function bsc971617. - CVE-2016-4797: Fixed heap buffer overflow bsc980504. - CVE-2018-14423: Fixed division-by-zero vulnerabilitie...
binutils 2.37 Objdump Segmentation Fault
Exploit Title: binutils 2.37 - Objdump Segmentation Fault Date: 2021-11-03 Exploit Author: p3tryx Vendor Homepage: https://www.gnu.org/software/binutils/ Version: binutils 2.37 Tested on: Ubuntu 18.04 CVE : CVE-2021-43149 Payload file %223"\972\00\0083=Q333A11111111411111333333A $$$\FF$\80 1114...
binutils 2.37 - Objdump Segmentation Fault
Exploit Title: binutils 2.37 - Objdump Segmentation Fault Date: 2021-11-03 Exploit Author: p3tryx Vendor Homepage: https://www.gnu.org/software/binutils/ Version: binutils 2.37 Tested on: Ubuntu 18.04 CVE : CVE-2021-43149 Payload file %223"\972\00\0083=Q333A11111111411111333333A $$$\FF$\80 1114...
Ubuntu 18.04 LTS / 20.04 LTS : FriBidi vulnerabilities (USN-5366-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5366-1 advisory. It was discovered that FriBidi incorrectly handled processing of input strings resulting in memory corruption. An attacker could use this iss...
Updated openjpeg2 packages fix security vulnerability
A flaw was found in the opj2decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and...
MGASA-2022-0129 Updated openjpeg2 packages fix security vulnerability
A flaw was found in the opj2decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and...
Denial Of Service (DoS)
jhead is vulnerable to denial of service. The vulnerability exists due to a wild address read in the Get16u function in exif.c causing a segmentation fault via a craftedfile...
Controlled heap buffer overflow in SDP packet parsing
Description A malicious server can trigger an out-of-bounds heap write via a specially crafted SDP packet due to no bounds check when parsing time zone information into the AdjustmentTime and AdjustmentOffset fields of GFSDPTiming. Proof of Concept poc.py is available here terminal 1 python3 poc....
SUSE-SU-2022:1041-1 Security update for opensc
This update for opensc fixes the following issues: Security issues fixed: - CVE-2021-42780: Fixed use after return in insertpin bsc1192005. - CVE-2021-42779: Fixed use after free in scfilevalid bsc1191992. - CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c bsc1192000. -...
DEBIAN-CVE-2022-1172
Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV...
CVE-2022-1172
Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV...
CVE-2022-1172
Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV...
Null pointer dereference
Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV...
