NULL dereference validating DSA public key

An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVPPKEYpubliccheck function. This will most likely lead to an application crash. This function can be called on public keys supplied from untrusted sources which could allo...

CVE-2022-42444

CVE-2022-42444 affects IBM App Connect Enterprise 11.0.0.8–11.0.0.19 and 12.0.1.0–12.0.5.0, where a buffer overflow could allow a remote privileged user to crash the application. The root cause is a vulnerability in IBM App Connect Enterprise’s handling that leads to uncontrolled memory operation...

Denial Of Service (DoS)

sox is vulnerable to Denial of Service DoS attacks. A floating-point exception in lsxaiffstartwrite function in aiff.c in libsox.a allows remote attackers to cause an application crash...

Denial Of Service (DoS)

sox is vulnerable to Denial of Service DoS attacks. An assertion failure in rateinit function in rate.c in libsox.a allows remote attackers to cause an application crash...

NULL Pointer Dereference

kernel is vulnerable to NULL Pointer Dereference. The vulnerability exists in the x86emulateinsn function of emulate.c while executing an illegal instruction in guest in the Intel CPU which allows an attacker cause an application crash...

Use-After-Free

openssl is vulnerable to Use-After-Free. The vulnerability exists because there is a missing check for the return value from the initialization function which allows an attacker to cause an application crash...

Denial Of Service (DoS)

kernel-rt is vulnerable to Denial Of Service DoS. The vulnerability exists due to the incorrect TLB flush issue in the library, which leads to random memory corruption or data leaks, allowing an attacker to cause an application crash...

Buffer Overflow

libgpac.so is vulnerable to Buffer Overflows. The vulnerability exists in the 263dmxprocess function in reframeh263.c filters which allows an attacker to cause a buffer overflow resulting an application crash...

CVE-2023-23932 Specially crafted RTPS message may cause an OpenDDS application to crash

OpenDDS is an open source C++ implementation of the Object Management Group OMG Data Distribution Service DDS. OpenDDS applications that are exposed to untrusted RTPS network traffic may crash when parsing badly-formed input. This issue has been patched in version 3.23.1...

Denial Of Service (DoS)

libgpac.so is vulnerable to Denial Of Service DoS. The vulnerability exists in gfisomboxparseex function of boxfuncs.c due to a memory leak causing an application crash...

CVE-2021-36493

Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command...

Buffer overflow

Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command...

Use After Free

libgpac.so is vulnerable to Use-After-Free. The vulnerability exists due to a lack of entity value validations in the m2tsdmxdeclarepid parameter in dmxm2ts.c which leads to memory consumption resulting in an application crash...

Integer Overflow

libgpac.so is vulnerable to Integer Overflow. The vulnerability exists in the gfhevcreadspsbs function of avparsers.c because of the lack of validations in profile size, which allows the remote attacker to crash the application...

CVE-2021-36493

Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command...

CVE-2021-36493

Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command...

CVE-2021-36493

Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command...

Denial Of Service (DoS)

libcmark-gfm.so is vulnerable to Denial of Service DoS attacks. A malicious user is able to pass various commands with very large values through inlines.c, causing the running time to increase quadratically due to polynomial time complexity issues, resulting in an application crash...

Use-after-free

kernel is vulnerable to Use-after-free. A race condition between the VTDISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free resulting in an application crash...

Denial Of Service (DoS)

github.com/rancher/wrangler is vulnerable to Denial Of Service DoS. The vulnerability exists in multiple functions of git.go as it does not properly validate the Git credential user input, which allows an attacker to cause an application crash by providing maliciously crafted Git credentials...