12224 matches found
CVE-2019-12207
CVE-2019-12207 affects njs (through 0.3.1) used with NGINX, caused by a heap-based buffer over-read in nxt_utf8_decode (nxt/nxt_utf8.c). CVSS v3 base score 9.8 (CRITICAL) indicates high impact on confidentiality, integrity, and availability with network access and no authentication. The provided ...
CVE-2019-12198
In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header...
CVE-2019-12198
In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header...
CVE-2019-12198
CVE-2019-12198 affects GoHttp (up to 2017-07-25). The vulnerability is a stack-based buffer over-read triggered by a long User-Agent header. Red Hat and NVD entries confirm the issue; no additional technical details (components, affected versions, root cause, exploit specifics, or fixes) are prov...
CVE-2019-12198
In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header...
Updated netpbm packages fix security vulnerability
The pmmallocarray2 function allowed remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file CVE-2018-8975...
MGASA-2019-0183 Updated netpbm packages fix security vulnerability
The pmmallocarray2 function allowed remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file CVE-2018-8975...
Updated libsndfile packages fix security vulnerability
A heap-based buffer over-read at wav.c in wavwriteheader that could be used for a denial of service attack CVE-2018-19758...
CVE-2019-12159
GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function when called from getRequestType via a long URL...
Stack overflow
GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function when called from getRequestType via a long URL...
CVE-2019-12159
GoHTTP (up to 2017-07-25) contains a stack-based buffer over-read in the scan function invoked by getRequestType when processing a long URL. This is the concrete vulnerability described in CVE-2019-12159 and mirrored in multiple feeds (NVD, Red Hat, CVE lists). The available documents do not spec...
CVE-2019-12159
GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function when called from getRequestType via a long URL...
Buffer Over-read
Open vSwitch is vulnerable to buffer over-read vulnerability. A remote unauthenticated attacker could cause denial of service conditions during BUNDLE action decoding via a buffer over-read. Affected is the function decodebundle in the library lib/ofp-actions.c...
Denial Of Service (DoS)
libcurl.so is vulnerable to buffer over-read. There is a flaw in the application when reading RTSP responses, if there are no headers in the RTSP responses the library reads beyond the buffer, leading to the reading of sensitive information beyond the buffer or to the application crashing...
Denial Of Service (DoS)
PHP is vulnerable to denial of serviceDoS attacks. An attacker could exploit a flaw in the PHAR archive handler by supplying a malicious archive file which may leads to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the pharparsepharfile function in...
Buffer Over-Read
PHP is vulnerable to buffer-over-read vulnerability. This occurs in the objectcommon1 function in ext/standard/varunserializer.c. Remote attackers could cause a denial of service via crafted serialized data that is mishandled in a finishnesteddata call...
CVE-2018-7438
An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the parseunicodestring function...
CVE-2018-7439
An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the function readminibiffnextrecord...