12080 matches found
PT-2023-26541 · Nasm +1 · Nasm +1
Name of the Vulnerable Software and Affected Versions: nasm version 2.16 Description: The issue is a stack-based buffer over-read in the disasm component, which allows attackers to cause a denial of service, resulting in a crash. Recommendations: For nasm version 2.16, at the moment, there is no...
CVE-2022-48554
CVE-2022-48554 affects the file utility (the Open Source project named “File”) with a stack-based buffer over-read in file_copystr() in funcs.c, before version 5.43. The issue can cause denial of service or potentially memory corruption. Affected distributions/contexts include Apple platforms (ma...
CVE-2021-29390
CVE-2021-29390 affects libjpeg-turbo 2.0.90, with a heap-based over-read (2 bytes) in decompress_smooth_data (jdcoefct.c). The MiracleLinux AXSA advisory confirms the issue and maps it to the same CVE; no exploit or in-wild details are provided in the connected documents. Remediation/fix version ...
CVE-2023-38667
Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service...
CVE-2023-38668
Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service crash...
CVE-2023-21625
Information disclosure in Network Services due to buffer over-read while the device receives DNS response...
Information disclosure
Information disclosure in Network Services due to buffer over-read while the device receives DNS response...
CVE-2023-28555 Buffer Over-read in Audio
Transient DOS in Audio while remapping channel buffer in media codec decoding...
CVE-2023-28555 Buffer Over-read in Audio
Transient DOS in Audio while remapping channel buffer in media codec decoding...
CVE-2023-21625
CVE-2023-21625 describes an information disclosure due to a buffer over-read during DNS response processing in Network Services, attributed to Qualcomm-based devices. The CVE is documented with high impact in CVSS metrics (confidentiality impact HIGH; network attack; no user interaction needed). ...
SUSE SLES12: libQt5Bootstrap-devel-static / libQt5Concurrent-devel / etc (SUSE-SU-2023:2971-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2971-1 advisory. - CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS bsc1209616. - CVE-2023-33285: Fixed buffer overflow in QDnsLookup bsc1211642....
PT-2023-4339 · Foxit · Foxit Pdf Reader +1
Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PDF Editor affected versions not specified Description: The issue is related to a buffer data out-of-bounds read in Foxit PDF Reader and Foxit PDF Editor. It allows remote attackers to...
EulerOS Virtualization 3.0.6.6 : vim (EulerOS-SA-2023-2442)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. CVE-2022-1725 - Buffer Over-read in GitHub repository vim/v...
The vulnerability of the function `ksmbd_smb2_check_message()` in the file system KSMBD’s `fs/smb/server/smb2misc.c` file allows a attacker to access protected information or cause service failures.
The vulnerability of the ksmbdsmb2checkmessage function in the fs/smb/server/smb2misc.c file of the KSMBD file system in the Linux operating system is related to reading data beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to access protected information or cause...
SUSE SLES12: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2023:2907-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2907-1 advisory. - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service bsc1199272. - CVE-2018-21009:...
Medium: tcpdump
Issue Overview: The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint for VRRP version 3, a different vulnerability than CVE-2018-14463. CVE-2019-15167 Affected Packages: tcpdump Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this...
CVE-2020-23909
Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...
CVE-2020-23909
Heap-based buffer over-read in function pngconvert4 in file pngex.cc in AdvanceMAME through 2.1...