12174 matches found
Heap overflow
In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpiparsepacketlineinfo in lib/ndpimain.c...
CVE-2020-15472
In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpisearchh323 in lib/protocols/h323.c, as demonstrated by a payload packet length that is too short...
CVE-2020-15471
CVE-2020-15471 affects nDPI up to version 3.2, where the packet parsing function ndpi_parse_packet_line_info in lib/ndpi_main.c is vulnerable to a heap-based buffer over-read. Multiple sources document this vulnerability and point to Open PoCs and public disclosures, indicating an in-memory bound...
CVE-2020-15471
In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpiparsepacketlineinfo in lib/ndpimain.c...
CVE-2020-15471
In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpiparsepacketlineinfo in lib/ndpimain.c...
CVE-2020-15472
CVE-2020-15472 affects ndpi (nDPI) up to version 3.2. The H.323 dissector contains a heap-based buffer over-read in ndpi_search_h323 (lib/protocols/h323.c) triggered by a payload with insufficient length, exposed over the network. Impact per sources ranges from Partial confidentiality/availabilit...
CVE-2020-15473
In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpisearchopenvpn in lib/protocols/openvpn.c...
CVE-2020-15473
In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpisearchopenvpn in lib/protocols/openvpn.c...
PT-2020-14439 · Ntop · Ndpi
Name of the Vulnerable Software and Affected Versions: nDPI versions 3.2 and earlier Description: The issue is related to a heap-based buffer over-read in the H.323 dissector, specifically in the ndpi search h323 function located in lib/protocols/h323.c. This occurs when a payload packet length i...
EulerOS Virtualization 3.0.6.0 : SDL (EulerOS-SA-2020-1740)
According to the versions of the SDL package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - SDL Simple DirectMedia Layer through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MSADPCMdecode in...
EulerOS Virtualization 3.0.6.0 : libsndfile (EulerOS-SA-2020-1724)
According to the versions of the libsndfile package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is a heap-based buffer over-read at wav.c in wavwriteheader in libsndfile 1.0.28 that will cause a denial of...
PT-2020-14443 · Ntop · Ndpi
Name of the Vulnerable Software and Affected Versions: nDPI versions 3.2 and earlier Description: The issue is related to a heap-based buffer over-read in the Oracle protocol dissector. This occurs in the ndpi search oracle function located in lib/protocols/oracle.c. Recommendations: For nDPI...
Debian DLA-2267-1 : libmatio security update
In libmatio, a library to read and write Matlab MAT files, a vulnerability was fixed in MatVarReadNextInfo4 in mat4.c that could lead to a heap-based buffer over-read in strdupvprintf. For Debian 8 'Jessie', this problem has been fixed in version 1.5.2-3+deb8u1. We recommend that you upgrade your...
EulerOS Virtualization 3.0.6.0 : ruby (EulerOS-SA-2020-1717)
According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as...
[SECURITY] [DLA 2267-1] libmatio security update
Package : libmatio Version : 1.5.2-3+deb8u1 CVE ID : CVE-2019-17533 In libmatio, a library to read and write Matlab MAT files, a vulnerability was fixed in MatVarReadNextInfo4 in mat4.c that could lead to a heap-based buffer over-read in strdupvprintf. For Debian 8 "Jessie", this problem has been...
CVE-2020-15395
In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in StreamsFillPerStream in Multiple/FileMpegPs.cpp aka an off-by-one during MpegPs parsing...
Stack overflow
In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in StreamsFillPerStream in Multiple/FileMpegPs.cpp aka an off-by-one during MpegPs parsing...
CVE-2020-15395
In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in StreamsFillPerStream in Multiple/FileMpegPs.cpp aka an off-by-one during MpegPs parsing...
