buf (>=0.1.0, <=0.2.1), i-o (>=0.1.0, <=0.4.1) +2 more potentially affected by CVE-2021-25907 via containers (>=0.1.1, <=0.8.5)

containers CARGO version =0.1.1, =0.1.0, =0.1.0, =0.13.0, =0.14.1 - lude 0.1.0 Source cves: CVE-2021-25907 Source advisory: OSV:RUSTSEC-2021-0010...

PT-2021-27537

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 13 crash has been reported. The crash involves the functions git buf vprintf, giterr set, and git strntol32. No information i...

CVE-2020-11835

In /SM8250QMaster/android/vendor/oppocharger/oppo/chargeric/oppoda9313.c, failure to check the parameter buf in the function procworkmodewrite in procworkmodewrite causes a vulnerability...

PT-2020-17659

Name of the Vulnerable Software and Affected Versions acc reader crate through 2020-12-27 Description The issue allows arbitrary Read implementations to read from an uninitialized buffer, resulting in memory exposure. This can also cause incorrect numbers of bytes to be written to the buffer...

PT-2020-17658

Name of the Vulnerable Software and Affected Versions acc reader crate through 2020-12-27 Description The issue allows arbitrary Read implementations to read from an uninitialized buffer, resulting in memory exposure. This can also cause the implementations to return an incorrect number of bytes...

PT-2020-22030

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: s exD process, sreadbuf, and s...

PT-2020-22018

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description A crash occurred due to a segmentation fault on an unknown address. The crash state includes functions such as s DCTD process, sreadbuf, and s process read buf. No information is availabl...

PT-2020-21984

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 1 crash has been reported. The crash involves the functions encoded to buf, flb utils write str, and msgpack2json...

UBUNTU-CVE-2020-16150

A Lucky 13 timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length...

openSUSE Security Update : MozillaFirefox (openSUSE-2020-1189)

This update for MozillaFirefox fixes the following issues : This update for MozillaFirefox and pipewire fixes the following issues : MozillaFirefox Extended Support Release 78.1.0 ESR - Fixed: Various stability, functionality, and security fixes bsc1174538 - CVE-2020-15652: Potential leak of...

PT-2020-22242

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the git buf decode base85 function, parse patch binary...

PT-2020-22407

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a negative-size-param, as reported by OSS-Fuzz. The crash occurs in the following functions: r buf read, bin pe g...

PT-2020-22500

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow write crash. The crash state includes functions such as r buf read, parse function starts, and init items. N...

PT-2020-21654

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 2 crash type has been identified, involving the functions vips buf vappendf, vips verror, and vips error. Recommendations At the...

Medium: kernel-livepatch-4.14.165-133.209

Issue Overview: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the nttyreceivebufcommon function in drivers/tty/ntty.c.CVE-2020-8648 Affected Packages: kernel-livepatch-4.14.165-133.209 Issue Correction: Please ensure you have live patching enabled. Run yum update...

PT-2020-19186

Name of the Vulnerable Software and Affected Versions stb versions prior to 1.23 Description The issue is related to an assertion failure in the stbtt buf seek function. Recommendations For versions prior to 1.23, update to version 1.23 or later to resolve the issue...

PT-2020-19189

Name of the Vulnerable Software and Affected Versions stb versions prior to 1.23 Description The issue is related to a heap-based buffer over-read in the stbtt buf peek8 function. Recommendations For versions prior to 1.23, update to version 1.23 or later to resolve the issue...

PT-2020-19187

Name of the Vulnerable Software and Affected Versions stb versions 1.22 and earlier Description The issue is related to a heap-based buffer over-read in the stbtt buf get8 function. Recommendations For versions 1.22 and earlier, update to a version that fixes the heap-based buffer over-read issue...

PT-2019-5280

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to a null pointer dereference in QEMU, which can lead to a denial of service. Specifically, the ahci commit buf function in ide/ahci.c is vulnerable when the command header...

PT-2019-4094

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.11 Description The issue is related to a memory leak in the mwifiex pcie alloc cmdrsp buf function, which can lead to uncontrolled resource consumption. This can be exploited by a remote attacker to cause a...