CVE-2022-28750 Zoom On-Premise Deployments: Stack Buffer Overflow in Meeting Connector

Zoom On-Premise Meeting Connector Zone Controller ZC before version 4.8.20220419.112 fails to properly parse STUN error codes, which can result in memory corruption and could allow a malicious actor to crash the application. In versions older than 4.8.12.20211115, this vulnerability could also be...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. The vulnerability exists in the WEBUI component, allowing an attacker to convince a user to engage in specific user interaction to potentially exploit heap corruption via specific UI interactions to crash the application...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. The vulnerability exists due to the out of bound read in the Dawn, allowing an attacker to crash the application by providing a maliciously crafted HTML page...

Denial Of Service (DoS)

vim is vulnerable to denial of service. It is possible to cause heap-based buffer overflow in GitHub repository which allows an attacker to crash the application by providing malicious input...

GLSA-202208-16 : faac: Denial of service

The remote host is affected by the vulnerability described in GLSA-202208-16 faac: Denial of service - An invalid memory address dereference was discovered in the huffcode function libfaac/huff2.c in Freeware Advanced Audio Coder FAAC 1.29.9.2. The vulnerability causes a segmentation fault and...

Apache Avro Rust SDK corrupted data read can cause crash

It is possible to crash panic an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 previously known as avro-rs. Users should update to apache-avro version 0.14.0 which addresses this issue...

GHSA-3W5G-989P-35R8 Apache Avro Rust SDK corrupted data read can cause crash

It is possible to crash panic an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 previously known as avro-rs. Users should update to apache-avro version 0.14.0 which addresses this issue...

mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr

MariaDB through 10.5.9 allows an application crash in subselectpostjoinaggr for a NULL value of aggr...

Buffer Overflow

vim is vulnerable to denial of service. The vulnerability exists due to a classic buffer overflow which allows an attacker to cause an application crash...

CVE-2022-36125

It is possible to crash panic an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 previously known as avro-rs. Users should update to apache-avro version 0.14.0 which addresses this issue...

ROS-20220721-02

A vulnerability in the Harfbuzz text conversion library involves an integer overflow in the hb-ot-shape-fallback.cc file. Exploitation of the vulnerability could allow an attacker acting remotely to pass specially crafted data to an application, cause an integer overflow, and cause the applicatio...

Ubuntu 16.04 ESM : libjpeg-turbo vulnerabilities (USN-5553-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5553-1 advisory. It was discovered that libjpeg-turbo was not properly handling EOF characters, which could lead to excessive memory consumption through the execution of ...

Heap-based Buffer Overflow

vim is vulnerable to heap-based buffer overflow. An out-of-bounds write vulnerability in vimregsubboth function in the src/regexp.c file allows remote attackers to cause an application crash, possibly reading and modifying some amount of memory contents...

WEM 2203: Citrix WEM Service Citrix.Wem.Agent.Service.exe crash

After installing WEM Agent version 2203, the following system events are logged in the VDA: Event ID 1026: .NET Runtime Application: Citrix.Wem.Agent.Service.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. and Event ID 1000: Faulting...

Use-After-Free

samba is vulnerable to use-after-free. The vulnerability exists because the AD DC database audit logging module can access LDAP message values freed by a preceding database module which allows an attacker to cause a memory corruption which then leads to an application crash...

Oracle Linux 8 : mariadb:10.5 (ELSA-2022-5826)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5826 advisory. galera 26.4.11-1 - Rebase to 26.4.11 mariadb 3:10.5.16-2 - Release bump for rebuild 3:10.5.16-1 - Rebase to 10.5.16 3:10.5.15-1 - Rebase to 10.5.15...

Denial of Service via Attachment Upload

Description An attacker can upload an attachment without any size limitation which leads to an exception and the crash of the application. Proof of Concept 1. 1 - Log in and select and project and card. 2. 2 - Upload a file, in this case, a 5GB file. Used sample file. 3. 3 - After some seconds th...

Denial Of Service

Socket IO Client is vulnerable to denial of service. The vulnerability exists due to a null pointer dereference occurs when parsing invalid payload format which allows an attacker to cause an application crash...

Denial Of Service (DoS)

go is vulnerable to Denial Of Service DoS. The vulnerability exists because of an index out of range in Float.GobDecode which allows a malicious user to cause an application crash...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The vulnerability exists due to an insufficient TLB flush for x86 PV guests in shadow mode which allows an attacker to crash the application by providing a malicious input...