Lucene search
K

1000 matches found

NVD
NVD
added 2021/05/12 11:15 a.m.13 views

CVE-2020-35198

An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...

9.8CVSS0.01344EPSS
Exploits0References3
Prion
Prion
added 2021/05/12 11:15 a.m.18 views

Integer overflow

An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...

7.5CVSS9.5AI score0.01344EPSS
Exploits0References3Affected Software2
CVE
CVE
added 2021/05/12 10:55 a.m.92 views

CVE-2020-35198

CVE-2020-35198 affects Wind River VxWorks 7. The vulnerability is caused by an integer overflow in the memory allocator when calculating a memory block size for calloc(), resulting in the allocated memory being smaller than the requested buffer and causing memory corruption. Public documents in c...

9.8CVSS9.5AI score0.01344EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2021/04/30 12:0 a.m.4 views

PT-2024-11114 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the memory control and slab management in the Linux kernel. Specifically, it involves the use of obj cgroup APIs to charge kmem pages. The problem arises when...

8.8CVSS6.1AI score0.04499EPSS
Exploits19References212
CNVD
CNVD
added 2021/04/28 12:0 a.m.18 views

Unbound integer overflow vulnerability (CNVD-2021-32620)

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the region allocator in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability to cause an integer overflow via regionalloc...

9.8CVSS6.7AI score0.00743EPSS
Exploits0References1
OSV
OSV
added 2021/04/27 6:15 a.m.13 views

CVE-2019-25033

Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGNUP macro. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

9.8CVSS9.6AI score
Exploits0References3
OSV
OSV
added 2021/04/27 6:15 a.m.1 views

DEBIAN-CVE-2019-25032

Unbound before 1.9.5 allows an integer overflow in the regional allocator via regionalalloc. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

9.8CVSS8.4AI score0.00743EPSS
Exploits0References1
OSV
OSV
added 2021/04/27 6:15 a.m.1 views

DEBIAN-CVE-2019-25033

Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGNUP macro. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

9.8CVSS8.4AI score0.00324EPSS
Exploits0References1
OSV
OSV
added 2021/04/27 6:15 a.m.16 views

CVE-2019-25032

Unbound before 1.9.5 allows an integer overflow in the regional allocator via regionalalloc. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

9.8CVSS9.6AI score
Exploits0References3
UbuntuCve
UbuntuCve
added 2021/04/27 6:15 a.m.34 views

CVE-2019-25033

Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGNUP macro. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

9.8CVSS7.2AI score0.00324EPSS
Exploits0References3
OSV
OSV
added 2021/04/27 6:15 a.m.0 views

UBUNTU-CVE-2019-25033

Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGNUP macro. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

9.8CVSS7.3AI score0.00324EPSS
Exploits0References4
OSV
OSV
added 2021/04/27 6:15 a.m.0 views

UBUNTU-CVE-2019-25032

Unbound before 1.9.5 allows an integer overflow in the regional allocator via regionalalloc. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

9.8CVSS7.3AI score0.00743EPSS
Exploits0References4
Prion
Prion
added 2021/04/27 6:15 a.m.32 views

Integer overflow

DISPUTED Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGNUP macro. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

7.5CVSS9.4AI score0.00324EPSS
Exploits0References3Affected Software2
UbuntuCve
UbuntuCve
added 2021/04/27 6:15 a.m.38 views

CVE-2019-25032

Unbound before 1.9.5 allows an integer overflow in the regional allocator via regionalalloc. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

9.8CVSS7.2AI score0.00743EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2021/04/27 5:17 a.m.42 views

CVE-2019-25033

Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGNUP macro. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited...

9.8CVSS9.7AI score0.00324EPSS
Exploits0
CNNVD
CNNVD
added 2021/04/27 12:0 a.m.1 views

NLnet Labs Unbound 输入验证错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the region allocator in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability to cause an integer overflow via regionalloc...

9.8CVSS5.7AI score0.00743EPSS
Exploits0References17
Veracode
Veracode
added 2021/04/22 1:46 a.m.18 views

Denial Of Service (DoS)

redis is vulnerable to denial of service. A heap overflow was found in when using a heap allocator other than jemalloc or glibc's malloc allows an attacker to crash the application...

5.3CVSS2.9AI score0.00423EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2021/04/16 12:0 a.m.20 views

openSUSE: Security Advisory for ceph (openSUSE-SU-2021:0079-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS7.2AI score0.00071EPSS
Exploits0References2
OSV
OSV
added 2021/04/03 12:0 a.m.10 views

OSV-2021-593 Heap-use-after-free in std::__1::vector<char, std::__1::allocator<char> >::size

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32822 Crash type: Heap-use-after-free READ 8 Crash state: std::1::vector ::size std::1::vector ::resize Assimp::TXmlParser::clear...

7.2AI score
Exploits0References1
CNVD
CNVD
added 2021/04/01 12:0 a.m.6 views

Redis Labs Redis Multiple Products Buffer Overflow Vulnerability

Redis Labs Redis is the United States Redis Labs, Inc. of a set of open-source use of ANSI C written to support the network , can be based on the memory can also be a persistent log-type , key-value Key-Value storage database , and provides a variety of languages API. A buffer overflow...

5.3CVSS7.1AI score0.00423EPSS
Exploits0References1
Rows per page
Query Builder