1591 matches found
golang: crypto/tls: certificate of wrong type is causing TLS client to panic
A flaw was found in golang. A panic can be triggered by an attacker in a privileged network position without access to the server certificate's private key, as long as a trusted ECDSA or Ed25519 certificate for the server exists or can be issued, or the client is configured with...
DEBIAN-CVE-2020-24821
A vulnerability in the dwarf::cursor::skipform function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file...
DEBIAN-CVE-2020-24827
A vulnerability in the dwarf::cursor::skipform function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file...
UBUNTU-CVE-2020-24827
A vulnerability in the dwarf::cursor::skipform function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted ELF file...
PT-2021-6548
Name of the Vulnerable Software and Affected Versions Libelfin version 0.3 Description The issue is related to the dwarf::cursor::skip form function in Libelfin, which can be exploited by attackers to cause a denial of service DOS through a segmentation fault. This can be achieved by using a...
PT-2021-6522
Name of the Vulnerable Software and Affected Versions Libelfin version 0.3 Description A vulnerability in the dwarf::cursor::skip form function allows attackers to cause a denial of service through a segmentation fault via a crafted ELF file. The issue is related to errors in resource release...
Libelfin security vulnerabilities
Libelfin is a C 11 library for reading ELF binaries and DWARFv4 debug information. libelfin has a buffer overflow vulnerability in v0.3, which stems from incorrect handling of the dwarf::cursor::skipform function leading to a buffer overflow that can be exploited by an attacker via a crafted...
Libelfin injection vulnerability
Libelfin is a C 11 library for reading ELF binaries and DWARFv4 debug information. a denial of service vulnerability exists in the dwarf::cursor::skipform function of Libelfin 0.3. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted ELF file causing a...
GSD-2021-1001370 net/sched: act_skbmod: Skip non-Ethernet packets
net/sched: actskbmod: Skip non-Ethernet packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.199 by commit...
UVI-2021-1001309 net/sched: act_skbmod: Skip non-Ethernet packets
net/sched: actskbmod: Skip non-Ethernet packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.136 by commit...
GSD-2021-1001309 net/sched: act_skbmod: Skip non-Ethernet packets
net/sched: actskbmod: Skip non-Ethernet packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.136 by commit...
UVI-2021-1001240 net/sched: act_skbmod: Skip non-Ethernet packets
net/sched: actskbmod: Skip non-Ethernet packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.54 by commit...
GSD-2021-1001240 net/sched: act_skbmod: Skip non-Ethernet packets
net/sched: actskbmod: Skip non-Ethernet packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.54 by commit...
GSD-2021-1001166 net/sched: act_skbmod: Skip non-Ethernet packets
net/sched: actskbmod: Skip non-Ethernet packets This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...
CVE-2021-36377: Improper Certificate Validation
Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation...
EulerOS 2.0 SP8 : golang (EulerOS-SA-2021-1980)
According to the version of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader for xml.NewTokenDecoder returns EOF in the...
GSD-2021-1000746 netfilter: nft_ct: skip expectations for confirmed conntrack
netfilter: nftct: skip expectations for confirmed conntrack This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.125 by commit...
curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used
Libcurl offers a wildcard matching functionality, which allows a callback set with CURLOPTCHUNKBGNFUNCTION to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns...
curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used
Libcurl offers a wildcard matching functionality, which allows a callback set with CURLOPTCHUNKBGNFUNCTION to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns...
