PT-2020-21855

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: nl attr is valid, format odp tun...

PT-2020-21862

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions format generic odp key, check attr len, and format odp key attr. No...

PT-2020-22650

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the pgp parse algo attr blob, pgp get card features, and p...

PT-2020-22592

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A crash issue was identified, characterized as an UNKNOWN READ. The crash state involves functions such as H5O sdspace shared decode, H5O attr shared decode, and H5O msg iterate real...

PT-2020-22605

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves several functions: format u8x, format odp tun gtpu opt, and...

PT-2020-22604

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: tun key to attr, odp flow key fro...

PT-2020-22598

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash state indicates the involvement of functions such as H5O attr shared decode, H5O msg iterate real, and H5O attr open by name...

PT-2020-22538

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A crash issue was identified, characterized as an UNKNOWN READ. The crash involves the H5O dtype decode helper, H5O dtype shared decode, and H5O attr shared decode functions. Recommendations At...

PT-2020-22378

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state includes function calls such as parse sec attr 44, setcos select file, and sc select...

PT-2020-22323

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, as indicated by the crash type. The crash state involves functions such as format generic odp key, che...

PT-2020-22482

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions parse sec attr 44, setcos select file, and sc select file. No...

PT-2020-11499

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible out of bounds write in the get element attr rsp function of btif rc.cc due to a missing bounds check. This could potentially lead to remote code execution, although it'...

Malicious Package

Overview attr-searchable is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

Malicious Package

Overview attr-validator is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using attr-validat...

PT-2019-5671

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to a buffer over-read in the BGP parser of tcpdump, specifically in the bgp attr print function in print-bgp.c, which handles MP REACH NLRI. This can lead to a denial of service...

PT-2019-4783

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to the BGP parser in tcpdump, which allows stack consumption due to unlimited recursion in the bgp attr print function. This can lead to a denial of service. The problem is also...

PT-2019-11168

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9 Description: The issue is related to a missing bounds check in the add attr function of sdp discovery.c, which could lead to a possible out of bounds read. This may result in remote information disclosure withou...

PT-2019-11271

Name of the Vulnerable Software and Affected Versions: OPT/NET BV OPTOSS Next Gen Network Management System NG-NetMS versions v3.6-2 and earlier Description: The issue allows a malicious attacker to include their own SQL commands, which the database will execute, due to a SQL Injection...

PT-2018-19016

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.1 Description The issue is related to an incorrect bounds check in the sdpu extract attr seq function of sdp utils.cc, which could lead to a remote denial of service. No additional execution privileges are needed...

Linux Kernel 'xfs_attr.c' Local Denial of Service Vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 4.17. A local attacker could exploit the vulnerability to cause file system corruption...