6451 matches found
UBUNTU-CVE-2022-22742
When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable crash. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...
AZL-7163 CVE-2022-0158 affecting package vim for versions less than 8.2.4081-1
vim is vulnerable to Heap-based Buffer Overflow...
AZL-7157 CVE-2022-22823 affecting package expat for versions less than 2.4.3-1
buildmodel in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
GHSA-QPW2-XCHM-655Q Out-of-Bounds read in stringstream
Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream when using Node.js 4.x. WITHDRAWN This is a duplicate of GHSA-mf6x-7mm4-x2g7...
AZL-7127 CVE-2022-0128 affecting package vim for versions less than 8.2.4081-1
vim is vulnerable to Out-of-bounds Read...
AZL-33613 CVE-2021-44716 affecting package moby-buildx for versions less than 0.7.1-18
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...
AZL-33604 CVE-2021-44716 affecting package kube-vip-cloud-provider for versions less than 0.0.2-16
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...
AZL-35013 CVE-2021-44716 affecting package multus for versions less than 4.0.2-1
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...
AZL-35123 CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.8.2-1
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...
AZL-7086 CVE-2021-4193 affecting package vim for versions less than 8.2.4081-1
vim is vulnerable to Out-of-bounds Read...
AZL-7420 CVE-2021-4185 affecting package wireshark for versions less than 3.4.14-1
Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...
AZL-7417 CVE-2021-4181 affecting package wireshark for versions less than 3.4.14-1
Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...
AZL-7111 CVE-2021-4187 affecting package vim for versions less than 8.2.4081-1
vim is vulnerable to Use After Free...
AZL-7084 CVE-2021-4173 affecting package vim for versions less than 8.2.4081-1
vim is vulnerable to Use After Free...
CVE-2021-45523
NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user...
AZL-41801 CVE-2021-45480 affecting package hyperv-daemons for versions less than 6.6.35.1-1
An issue was discovered in the Linux kernel before 5.15.11. There is a memory leak in the rdsconncreate function in net/rds/connection.c in a certain combination of circumstances...
AZL-7096 CVE-2021-3622 affecting package hivex for versions less than 1.3.21-1
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, which would cause hivex to recursively call the getchildren function, leading to a stack overflow. The highest threat from this vulnerability is to system availability...
Linux kernel 缓冲区错误漏洞
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel versions prior to 5.15.11 have a security vulnerability that stems from f2fssetxattr in fs/f2fs/xattr.c in the Linux kernel, which can be exploited when an inode has an invalid last xattr...