Denial Of Service (DoS)

curl is vulnerable to denial of service attacks. A malicious user is able to cause an application crash due to improper validation of syntactic correctness of the input, which makes the server return a 400 Bad Request response...

Google Chrome Screen Capture Buffer Overflow Vulnerability

Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability previously existed in Google Chrome 105.0.5195.52, which stemmed from a boundary error when handling untrusted input in Screen Capture. An attacker could exploit this vulnerability to cause the buffer...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20201105.2030)

The version of AHV installed on the remote host is prior to 20201105.2030. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20201105.2030 advisory. - encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write acces...

Use-After-Free

connman is vulnerable to use-after-free. A WISPR HTTP query could be used to trigger a use-after-free in WISPR handling, leading to an application crash or code execution...

Denial Of Service (DoS)

github.com/helm/helm is vulnerable to denial of service. The vulnerability exists in setIndex function in parser.go because a maximum index is not defined when setting index which allows an attacker to cause an application crash...

Denial Of Service (DoS)

next is vulnerable to denial of service. The vulnerability exists in the extended function of getClonableBody in body-streams.ts due to some unhandled rejections when a connection is canceled with the edge runtime which allows an attacker to cause an application crash...

Regular Expression Denial Of Service (ReDoS)

sanitize-html is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the href attribute in the sanitizeHtml function of index.js, allowing an attacker to cause an application crash by providing a malicious input...

Denial Of Service (DoS)

snakeyaml is vulnerable to Denial Of Service DoS. The vulnerability exists because the Composer function of Composer.java does not properly restrict the nested depth limitation for collections, allowing an attacker to crash the application...

Denial Of Service (DoS)

htmldoc is vulnerable to denial of service. The vulnerability exists in writenode in htmldoc due to a buffer overflow which allows an attacker to cause an application crash...

Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service. The vulnerability exists due to the null pointer dereference when calling ZPrint, allowing an attacker to cause an application crash by providing a maliciously crafted input...

Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service DoS attacks. An attacker is able to cause a type to be incorrectly initialized in the function fincr of srport/fincr.c and cause a NULL pointer dereference via a crafted input resulting in an application crash...

Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service. The vulnerability exists due to the use after free condition in a pointer which pushed into previously free memory by the loop, allowing an attacker to cause an application crash by providing a malicious input...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability previously existed in Google Chrome 105.0.5195.52, which stemmed from a boundary error when handling untrusted input in Screen Capture. An attacker could exploit this vulnerability to cause the buffer...

Rocky Linux 8 : gnutls and nettle (RLSA-2021:4451)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4451 advisory. - A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated...

Denial Of Service (DoS)

ImageMagick is vulnerable to Denial Of Service DoS. The vulnerability exists due to an integer overflow via the ExportIndexQuantum function, which then calls to the GetPixelIndex function, resulting in values outside the representable range being assigned for the unsigned char variables, leading ...

Denial Of Service (DoS)

libsox.so is vulnerable to denial of service. The vulnerability exists due to a floating point exception in startread function in wav.c which allows an attacker to send a crafted wav file causing an application crash...

Denial Of Service (DoS)

libsox.so is vulnerable to denial of service. The vulnerability exists due to a heap buffer overflow in startread function in hcom.c which allows an attacker sned a crafted hcomn file causing an application crash...

CVE-2021-33844

A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...

CVE-2021-23210

A floating point exception divide-by-zero issue was discovered in SoX in functon readsamples of voc.c file. An attacker with a crafted file, could cause an application to crash...

CVE-2021-23172

A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash...