Astra Linux – Vulnerability in tinyxml

In TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML, as of version 2.6.2, there is a reachable assertion which leads to application exit when a crafted XML document is used, where a null character ‘\0’ is placed after a whitespace...

AZL-51909 CVE-2024-50613 affecting package libsndfile 1.2.2-4

libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpegl3encode.c mpegl3encoderclose...

DEBIAN-CVE-2024-50615

TinyXML2 through 10.0.0 has a reachable assertion for UINTMAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef...

UBUNTU-CVE-2020-8617

Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows or successfully guesses the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration doe...