1062 matches found
klibc 输入验证错误漏洞
klibc is an application program. Provides the ability to work from kernel space as early as possible. klibc versions prior to 2.0.9 are vulnerable to an input validation error, which stems from multiple possible integer overflows in the cpio command on 32-bit systems that could lead to buffer...
perl: heap-based buffer overflow in regular expression compiler leads to DoS
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow...
MGASA-2021-0155 Updated redis packages fix security vulnerability
It was discovered that there were a number of integer overflow issues in Redis. It is currently believed that the issues only affect 32-bit based systems CVE-2021-21309...
perl: heap-based buffer overflow in regular expression compiler leads to DoS
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow...
Integer overflow on 32-bit systems
...
DEBIAN-CVE-2021-27211
steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data...
FNET software Security Feature Issue Vulnerability
FNET is a soft armor from the FNET organization that provides dual TCP / IPv4 and IPv6 stack support for 32-bit MCUs. A security signature issue vulnerability exists in the FNET software that allows an attacker to spoof or corrupt a TCP connection...
Microsoft Windows Installer Security Feature Issue Vulnerability
Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security feature vulnerability exists in Microsoft Windows Installer. The following products and editions are affected: Windows 10...
Kernel: x86_32: BUG in syscall auditing
A flaw was found in the Linux kernel’s system-call auditing supportCONFIGAUDITSYSCALL for 32-bit platforms. It is vulnerable to a crash caused by erroneous handling of bad system call numerals. This issue occurs during syscall2 calls if system-call auditing is enabled on the system. This flaw...
Microsoft Windows WalletService Access Control Error Vulnerability
Microsoft Windows WalletService is an application from Microsoft Corporation USA. hosts objects used by the Wallet Client. An access control error vulnerability exists in Microsoft Windows WalletService. The following products and versions are affected:Windows 10 Version 1607 for x64-based...
Microsoft Windows Kernel Security Vulnerability
Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Kernel. The following products and editions are affected:Windows 10 Version 2004 for ARM64-based Systems,Windows 10 Version 2004 for 32-bit...
Exploit for CVE-2015-3636
PoC exploit for CVE-2015-3636, a vulnerability in the Linux kernel affecting 32-bit Android OS. The exploit targets the Linux kernel's socket timestamping functionality, specifically the SIOCGSTAMPNS ioctl command. The vulnerability allows an attacker to execute arbitrary code with elevated...
December 1, 2020, update for Skype for Business 2016 (KB4486745)
None None...
CVE-2020-9331
CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation by local users with the SeChangeNotifyPrivilege right because user-mode input is mishandled during process creation. An attacker can write arbitrary data to an arbitrary location in the kernel's address space...
CVE-2020-9331
CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation by local users with the SeChangeNotifyPrivilege right because user-mode input is mishandled during process creation. An attacker can write arbitrary data to an arbitrary location in the kernel's address space...
DEBIAN-CVE-2020-25600
An issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32-bit x86 domains. The so called 2-level event channel model imposes different limits on the number of usable event channels for 32-bit x86 domains vs 64-bit or Arm either bitness ones. 32-bit x86 domain...
UBUNTU-CVE-2020-25600
An issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32-bit x86 domains. The so called 2-level event channel model imposes different limits on the number of usable event channels for 32-bit x86 domains vs 64-bit or Arm either bitness ones. 32-bit x86 domain...
The vulnerability of the implementations of grub_cmd_initrd and grub_initrd_init, the Grub2 operating system loaders, allows an attacker to access confidential data, compromise data integrity, and cause service failures.
The vulnerability of the implementations of grubcmdinitrd and grubinitrdinit, which are used by the Grub2 operating system loader, is related to the introduction of a large number of arguments into the initrd command in 32-bit architectures. Exploiting this vulnerability allows an attacker to gai...
grub2: Integer overflow in initrd size handling
Integer overflows were discovered in the functions grubcmdinitrd and grubinitrdinit in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu the functionality is not included in GRUB2 upstream, leading to a heap-based buffer overflow. These could be triggered by an extremely...