Google Golang 环境问题漏洞

Google Golang is a static, strongly typed, compiled language from Google.The syntax of Go is close to C, but with differences in variable declarations.Go supports garbage collection.Go's parallel model is based on Tony Hall's Communicating Sequential Processes CSP, and other languages with a...

ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.

...

DEBIAN-CVE-2021-3522

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags...

MIT Kerberos 代码问题漏洞

MIT Kerberos is a Massachusetts Institute of Technology MIT software for authentication in network clusters.Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications through a key system. A security vulnerability...

GStreamer 缓冲区错误漏洞

GStreamer is an open source multimedia framework library . Use it to build a range of media processing modules , including from simple ogg playback functions to complex audio mixing and video non-linear editing processing . A buffer overflow vulnerability exists in GStreamer versions prior to...

GStreamer 资源管理错误漏洞

GStreamer is an open source multimedia framework library . Use it to build a range of media processing modules , including from simple ogg playback functions to complex audio mixing and video non-linear editing processing . A post-release reuse vulnerability exists in versions of GStreamer prior ...

PT-2021-7755 · Gstreamer +9 · Gstreamer +9

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.18.4 Description: The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of servi...

DEBIAN-CVE-2020-5225

Log injection in SimpleSAMLphp before version 1.18.4. The www/erroreport.php script, which receives error reports and sends them via email to the system administrator, did not properly sanitize the report identifier obtained from the request. This allows an attacker, under specific circumstances,...