CVE-2020-28163

CVE-2020-28163 affects libdwarf prior to 20201201. A NULL pointer dereference in the dwarf_print_lines.c path occurs when a DWARF5 line-table header uses an invalid FORM for a pathname, leading to an application crash. Public vulnerability descriptions consistently cite this as the root cause; ex...

CVE-2020-28163

libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...

PT-2023-11765 · Libdwarf · Libdwarf

Name of the Vulnerable Software and Affected Versions: libdwarf versions prior to 20201201 Description: The issue allows a NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname in the dwarf print lines.c file. Recommendations: For...

ROS-20230414-04

The curl program vulnerability is related to a memory usage error after release when processing rejected requests from HTTP proxy using SMB or TELNET protocols. Exploitation of the vulnerability could allow an attacker acting remotely to cause a post-release memory usage error and cause the...

Denial Of Service (DoS)

libbzip3.so is vulnerable to Denial Of Service DoS. The vulnerability exists in xwrite function of main.c because of not following the required procedure for interacting with libsais causing an application crash...

Wireshark 资源管理错误漏洞

Wireshark is a very popular network packet analyzer that intercepts various network packets and displays packet details. A security vulnerability exists in Wireshark. The vulnerability is related to the GQUIC parser. An attacker can exploit the vulnerability to inject misformatted packets into a...

ROS-20230412-02

Vim text editor vulnerability related to the classobjectindex vim function in the vim9class.c file. Exploitation of the vulnerability could allow an attacker acting remotely to trick a user into opening a specially crafted file, causing a problem that leads to a problem that leads to a bug. a use...

Denial Of Service (DoS)

github.com/golang/go is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause an infinite loop via integer overflows when calling any of the Parse functions which contain //line directives with very large line numbers, which can cause the application to crash...

Denial Of Service (DoS)

github.com/moby/moby is vulnerable to Denial Of Service DoS. The vulnerability exists due to the lack of VXLAN encryption validation in bpf.go allowing an attacker to inject cleartext VXLAN datagrams in the encrypted overlay network which can cause an application crash...

Denial Of Service (DoS)

libcmark-gfm.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to the quadratic behavior in rendering that may lead to unbounded resource exhaustion causing an application crash...

Denial Of Service (DoS)

libcmark-gfm.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to polynomial time complexity issues that may lead to unbounded resource exhaustion causing an application crash...

Denial Of Service (DoS)

wagtail is vulnerable to Denial of Service DoS attacks. The vulnerability exists because it does not properly validate the file size in fields.py which allows an attacker to cause an application crash...

Denial Of Service (DoS)

Unpoly-rails is vulnerable to Denial Of Service. The vulnerability exists due to the use of the request URL as an X-Up-Location response header in requestechoheaders.rb which allows an attacker to cause an application crash through a malicious input...

Google Chrome Browser History Buffer Overflow Vulnerability

Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in Google Chrome Browser History, which can be exploited by an attacker to cause the buffer to overflow and execute arbitrary code on the system, or cause the application to crash...

PT-2023-5345

Name of the Vulnerable Software and Affected Versions Libtiff affected versions not specified Description A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop...

Improper Authorization

github.com/hashicorp/vault is vulnerable to Improper Authorization. The vulnerability exists because the PKI mount issuer endpoints do not correctly authorize access to remove an issuer or modify issuer metadata which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libOpenImageIO.so is vulnerable to Denial of Service DoS attacks. A malicious user is able to trigger uncontrolled recursion via a malicious input through FitsOutput::close function , causing the application to crash...

Regular Expression Denial Of Service (ReDoS)

angular is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists due to inefficient regular expression complexity in the input type element which allows an attacker to crash the application by submitting maliciously crafted input...

Regular Expression Denial Of Service (ReDoS)

angular is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists due to inefficient regular expression complexity in the resource service which allows an attacker to crash the application by submitting maliciously crafted input...

Regular Expression Denial Of Service (ReDoS)

angular is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability exists due to inefficient regular expression complexity in the angular.copy function. which allows an attacker to crash the application by submitting maliciously crafted input...