Use After Free

chrome is vulnerable to Use after free. The vulnerability exists due to a memory corruption in Safe Browsing which allows an attacker to cause an application crash...

Use After Free

chrome is vulnerable to use after free. The vulnerability exists due to a memory corruption in Blink Layout which allows an attacker to cause an application crash...

Debian DSA-5108-1 : tiff - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5108 advisory. Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service if malformed image files a...

Denial Of Service (DoS)

pocketmine/pocketmine-mp is vulnerable to denial of service. The vulnerability exists due to lack of validations in the file upload in the netItemStackToCore function of TypeConverter.php which allows an attacker to cause an application crash...

Denial Of Service (DoS)

GNOME gdk-pixbuf is vulnerable to denial of service. A heap-buffer overflow is happened when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12 which causes an application crash...

Ubuntu 16.04 ESM : GNU binutils vulnerabilities (USN-5341-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5341-1 advisory. It was discovered that GNU binutils incorrectly handled checks for memory allocation when parsing relocs in a corrupt file. An attacker could possibly us...

EulerOS 2.0 SP5 : gdk-pixbuf2 (EulerOS-SA-2022-1320)

According to the versions of the gdk-pixbuf2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service NULL pointer dereference and...

EulerOS 2.0 SP5 : gnuplot (EulerOS-SA-2022-1322)

According to the versions of the gnuplot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and...

OESA-2022-1587 mariadb security update

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs a...

Integer Overflow

MariaDB before 10.6.5 has a sqllex.cc integer overflow, leading to an application crash...

Denial Of Service (DoS)

MariaDB is vulnerable to denial of service. It allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...

Denial Of Service (DoS)

MariaDB is vulnerable to denial of service. It allows an application crash in subselectpostjoinaggr for a NULL value of aggr...

Denial Of Service (DoS)

libressl is vulnerable to denial of service. The vulnerability exists due to a bug in the BNmodsqrt function which goes into an infinite loop which then causes an application crash...

Denial Of Service (DoS)

moodle/moodle is vulnerable to denial of service. The vulnerability exists due to improper validation in the file upload limits in the processupload function of the lib.php file allowing an attacker to cause an application crash...

Denial Of Service (DoS)

nicotine-plus is vulnerable to denial of service. The fileisshared function of shares.py does not properly handle invalid file paths in the file download requests, allowing an attacker to crash the application by providing null characters to the file path...

Security Bulletin: A security vulnerability in golang affects IBM Cloud Automation Manager

Summary A security vulnerability in golang affects IBM Cloud Automation Manager. Vulnerability Details CVEID: CVE-2022-23772 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a buffer overflow in the Rat.SetString function in math/big. By sending a specially-crafted request, ...

NULL Pointer Dereference

libtiff.so is vulnerable to NULL pointer dereference. The vulnerability exists in createImageSection function in tiffcrop.c because it doesn't check for return value of limitMalloc which allows an attacker to cause an application crash by sending a crafted tiff file...

Out-of-Bounds Read

libtiff.so is vulnerable to out-of-bounds read. The vulnerability exists in DECLAREwriteFunc function in tiffcp.c due to influence memory values which allows an attacker to send crated tiff file causing an application crash...

CVE-2022-0943

A heap buffer overflow flaw was found in vim's suggesttrychange function of the spellsuggest.c file. This flaw allows an attacker to trick a user into opening a crafted file, triggering a heap-overflow and causing an application to crash, which leads to a denial of service. Mitigation Untrusted v...

ROS-20220315-01

A vulnerability in the libxml2 XML document parsing library is related to a post-release memory usage error when processing ID and IDREF attributes in the valid.c file. release when processing ID and IDREF attributes in valid.c file. Exploitation of the vulnerability could allow an attacker actin...