CVE-2021-46853

CVE-2021-46853 affects Alpine prior to 2.25. A remote attacker can cause an application crash (denial of service) by sending LIST or LSUB before STARTTLS. This issue arises from how the IMAP/mail handling processes pre-TLS commands, enabling a crash under network conditions. The connected documen...

CVE-2021-46853

Alpine before 2.25 allows remote attackers to cause a denial of service application crash when LIST or LSUB is sent before STARTTLS...

Denial Of Service (DoS)

ntfs-3g is vulnerable to denial of service. The vulnerability exists because of a buffer overflow due to incorrect validation of some of the NTFS metadata which allows an attacker to cause an application crash...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. The vulnerability exists if the Garbage Collector was in a specific state, leading to memory corruption and potentially result in an application crash...

Denial Of Service (DoS)

mruby is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference in mrbvmexec which allows an attacker to crash the application...

Denial Of Service (DoS)

muhammara and hummas are vulnerable to denial of service. The vulnerability exists in the PDFParser::ParseLastXrefPosition function of PDFParser.cpp, allowing an attacker to cause an application crash through a maliciously crafted PDF file...

Denial Of Service (DoS)

libraw is vulnerable to denial of service. The vulnerability exists due to a memory corruption in crxFreeSubbandData function of crx.cpp when processing cr3 files causing an application crash...

Out-of-Bounds Read

libRaw is vulnerable to out-of-bounds reads. The vulnerability is within the LibRaw::parseSonySRF function of sony.cpp when processing srf files causing an application crash...

Out-of-Bounds Read

libRaw is vulnerable to out-of-bounds reads. The vulnerability is within the simpledecoderow function of x3futilspatched.cpp which can be triggered via an image with a large rowstride field causing an application crash...

Out-of-Bounds Read

libRaw is vulnerable to out-of-bounds reads. The vulnerability is within the LibRaw::adobecopypixel function of dng.cpp when reading data from the image file causing an application crash...

Out-of-Bounds Read

libRaw is vulnerable to out-of-bounds reads. The vulnerability is within the newnode function of x3futilspatched.cpp which can be triggered via a crafted X3F file causing an application crash...

Out-of-Bounds Read

libRaw is vulnerable to out-of-bounds reads. The vulnerability is within the gethuffmandiff function of x3futilspatched.cpp when reading data from an image file causing an application crash...

Denial Of Service (DoS)

libjpeg-turbo is vulnerable to denial of service. The vulnerability exists because of a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo which allows an attacker to send a crafted input file causing an application crash...

EulerOS 2.0 SP10 : python-lxml (EulerOS-SA-2022-2695)

According to the versions of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together wi...

Denial Of Service (DoS)

py3-rencode is vulnerable to denial of service. The vulnerability exists due to an infinite loop in typecode decoding enabling a remote attacker to cause a memory consumption resulting in an application crash...

Heap-based Buffer Overflow

upx is vulnerable to heap-based buffer overflow. The vulnerability exists in plxelf.cpp which allows an attacker to cause an application crash...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference in the QuickTimeVideo::userDataDecoder function of quicktimevideo.cpp causing an application crash...

Use After Free

mruby is vulnerable to use-after-free. The vulnerability exists in mrbvmexec due to a memory corruption which allows an attacker to cause an application crash...

Heap-based Buffer Overflow

imagemagick is vulnerable to heap-based buffer overflow. The vulnerability exists in ImageMagick's RelinquishDCMInfo function of dcm.c which allows an attacker to pass a specially crafted DICOM image file for conversion causing an information disclosure and an application crash...

Heap-based Buffer Overflow

libexiv2.so is vulnerable to heap-based buffer overflows. The vulnerability exists in the decodeBlock function of quicktimevideo.cpp due to improper handling of buffer size which allows an attacker to cause overflows resulting in an application crash...