CVE-2022-3116

The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash...

Denial Of Service (DoS)

dbus is vulnerable to denial of service. The vulnerability exists in dbusmarshalbyteswap as it doesn't process fds in messages with "foreign" endianness correctly which allows an attacker to crash the application...

Denial Of Service (DoS)

dbus is vulnerable to denial of service. The vulnerability exists when sending messages with array length inconsistent with element type which allows an attacker to cause an application crash...

CVE-2022-3324

A stack-based buffer overflow vulnerability was found in Vim's winredrruler function of the src/drawscreen.c file. The issue occurs when using a negative array index with a negative width window. This flaw allows an attacker to trick a user into opening a specially crafted file, which triggers th...

Denial Of Service (DoS)

rdiffweb is vulnerable to Denial Of Service DoS. A malicious user is able to set the Token name with a long string leading to memory corruption, resulting in an application crash...

Denial Of Service (DoS)

protobuf-java is vulnerable to denial of service. The vulnerability exists in the parsing procedure for binary and text format data because the input streams contain multiple instances of non-repeated embedded messages with repeated or unknown fields, resulting in potentially long garbage...

snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode

A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash...

curl: CVE-2022-35260: .netrc parser out-of-bounds access

Summary: Curl expects the .netrc file to have space characters. So if there is no space character, it will do an out-of-bounds read and a 1-byte out-of-bounds write. This can happen multiple times depending on the state of the memory. Steps To Reproduce: curl --netrc-file .netrc test.local ".netr...

Denial Of Service (DoS)

github.com/cloudflare/goflow is vulnerable to denial of service. The vulnerability exists in the DecodeTemplateSet function of netflow.go due to improper handling of sflow packets in the sflow decode package, which allows an attacker to craft malformed packets to consume a huge memory resulting i...

Denial Of Service (DoS)

jackson-databind is vulnerable to Denial Of Service DoS. The vulnerability exists in deserializeFromArray function in BeanDeserializer.java due to resource exhaustion when processing a deeply nested array which allows an attacker to cause an application crash via a malicious input...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. The vulnerability exists due to the out-of-bounds read in the library when decoding H264 video, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. The vulnerability exists due to use after free in URL parser with non-UTF-8 data which allows an attacker to cause an application crash via a malicious input...

Denial Of Service (DoS)

firefox is vulnerable to denial of service. The vulnerability exists due to data cache when creating wasm code which allows an attacker to cause an application crash via a malicious input...

Debian: Security Advisory (DLA-3129-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

vim/vim is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference because of a write access violation which allows an attacker to cause an application crash...

PT-2022-7265 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: Xpdf affected versions not specified Description: The issue is related to a buffer overflow in the XRef::fetch function of the Xpdf software. This could allow an attacker to cause the application to crash. Recommendations: At the moment, ther...

CVE-2022-2122

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the qt demuxer when processing a specially crafted QuickTime/MP4 file using zlib decompression. This vulnerability can result in application crash, memory corruption, and code execution...

CVE-2022-1924

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using lzo decompression. This vulnerability can result in application crash, memory corruption, and code execution...

CVE-2022-1923

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using bzip decompression. This vulnerability can result in application crash, memory corruption, and code execution...

CVE-2022-1922

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using zlib decompression. This vulnerability can result in application crash, memory corruption, and code execution...