PT-2021-27817

Name of the Vulnerable Software and Affected Versions ntfs affected versions not specified Description The issue is related to a crash caused by a negative-size-param, which occurs in the ntfs attr walk special, tsk fs attr walk, and ntfs proc attrseq functions. Recommendations At the moment, the...

AZL-6759 CVE-2021-39254 affecting package ntfs-3g for versions less than 2021.8.22-1

A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfsattrrecordresize, in NTFS-3G 2021.8.22...

PT-2021-10254

Name of the Vulnerable Software and Affected Versions: EARCLINK ESPCMS-P8 affected versions not specified Description: The issue is related to a SQL injection vulnerability in the espcms web/Search.php component. This vulnerability is exploited via the attr array parameter, allowing attackers to...

PT-2021-5785

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2021.8.22 Description A heap buffer overflow can occur when specially crafted NTFS attributes are read in the function ntfs attr pread i, allowing for writing to arbitrary memory or denial of service of the applicatio...

PT-2021-5757

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2021.8.22 Description The issue is related to a heap buffer overflow that can occur when a specially crafted NTFS attribute from the MFT is setup in the function ntfs attr setup flag, allowing for code execution and...

PT-2021-5759

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2021.8.22 Description The issue is related to out-of-bounds reads in the ntfs attr find and ntfs external attr find functions of the NTFS-3G driver. This can be exploited by a crafted NTFS image, potentially allowing ...

PT-2021-5772 · Ntfs-3G +6 · Ntfs-3G +6

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions prior to 2021.8.22 Description: A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs attr record resize. This issue may allow an attacker to access...

PT-2021-5773

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2021.8.22 Description The issue is related to an out-of-bounds read in the ntfs attr find in attrdef function of the NTFS-3G file system driver. This can be triggered by a crafted NTFS image, allowing an attacker to...

PT-2021-10695

Name of the Vulnerable Software and Affected Versions: Eyoucms version 1.4.1 Description: A stored cross site scripting XSS issue in the web attr 2 field allows authenticated attackers to execute arbitrary web scripts or HTML. This can lead to the execution of malicious code on the web applicatio...

PT-2021-28324

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash involves the functions tsk fs attr set run, fatfs make data runs, and tsk fs file attr...

GHSA-QW5H-7F53-XRP6 Stack overflow in `ParseAttrValue` with nested tensors

Impact The implementation of ParseAttrValue can be tricked into stack overflow due to recursion by giving in a specially crafted input. Patches We have patched the issue in GitHub commit e07e1c3d26492c06f078c7e5bf2d138043e199c1. The fix will be included in TensorFlow 2.5.0. We will also cherrypic...

PYSEC-2021-741

TensorFlow is an end-to-end open source platform for machine learning. The implementation of ParseAttrValuehttps://github.com/tensorflow/tensorflow/blob/c22d88d6ff33031aa113e48aa3fc9aa74ed79595/tensorflow/core/framework/attrvalueutil.ccL397-L453 can be tricked into stack overflow due to recursion...

XSS

Withdrawn: Duplicate of GHSA-vcjj-xf2r-mwvc. Knockout, before 3.5.0-beta, has an XSS injection point in attr name binding for browser IE7 and older...

OSV-2018-138 Heap-buffer-overflow in parse_odp_key_mask_attr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11160 Crash type: Heap-buffer-overflow READ 1 Crash state: parseodpkeymaskattr odpflowfromstring parsekeys...

PT-2021-27490

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions parse odp key mask attr, odp flow from string, and parse keys...

PT-2021-27516

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. The crash state involves several functions: nullable memcpy, nsh key to attr, and parse odp...

PT-2021-27646

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: The issue is related to a heap buffer overflow read. Technical details about the crash include the function names H5MM strdup, H5O attr shared decode, and H5O msg iterate real. Recommendations...

PT-2021-28208

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: The issue is related to a heap buffer overflow read. Technical details about the crash include the H5MM memcpy function, H5O attr decode function, and H5O attr shared decode function...

PT-2021-27466

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions format generic odp key, check attr len, and format odp key attr. ...

PT-2021-27625

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions parse odp key mask attr, parse odp action, and odp actions from...