12491 matches found
CVE-2018-14035
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5VMmemcpyvv in H5VM.c...
CVE-2018-14031
CVE-2018-14031 is confirmed in the connected data as a heap-based buffer over-read in HDF5 1.8.20, specifically in H5T_copy (H5T.c). ENISA OSV and SUSE/Nessus references list this issue among other HDF5 vulnerabilities affecting the 1.8.20/1.10.x series. The core detail available is that the vuln...
CVE-2018-14031
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Tcopy in H5T.c...
CVE-2018-14033
CVE-2018-14033 is described in the provided documents as a heap-based buffer over-read in the HDF5 1.8.20 library, specifically in H5O_layout_decode (H5Olayout.c) related to memcpy. The connected records confirm the affected component (HDF5 1.8.20) and the vulnerable function. No explicit exploit...
CVE-2018-14031
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Tcopy in H5T.c...
CVE-2018-14033
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Olayoutdecode in H5Olayout.c, related to HDmemcpy...
CVE-2018-14035
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5VMmemcpyvv in H5VM.c...
CVE-2018-14033
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Olayoutdecode in H5Olayout.c, related to HDmemcpy...
CVE-2018-14033
An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Olayoutdecode in H5Olayout.c, related to HDmemcpy...
PT-2018-12287 · Hdf +2 · Hdf5 +2
Name of the Vulnerable Software and Affected Versions: HDF5 version 1.8.20 Description: A heap-based buffer over-read issue was found in the H5T copy function in H5T.c. Recommendations: For version 1.8.20, consider applying a patch or fix to resolve the issue in the H5T copy function...
Heap overflow
The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...
CVE-2018-14017
The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...
CVE-2018-14017
The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...
Heap overflow
The rbinmdmpinitdirectoryentry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Mini Crash Dump file...
CVE-2018-14016
The rbinmdmpinitdirectoryentry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Mini Crash Dump file...
CVE-2018-14017
The CVE-2018-14017 entry affects radare2 (version 2.7.0) specifically the r_bin_java_annotation_new function in shlr/java/class.c. The vulnerability arises from missing input validation in r_bin_java_line_number_table_attr_new, enabling remote attackers to craft a .class file that triggers a heap...
CVE-2018-14016
The CVE-2018-14016 issue affects radare2 2.7.0, specifically the r_bin_mdmp_init_directory_entry function in mdmp.c. A crafted Mini Crash Dump file can trigger a heap-based buffer over-read, leading to an application crash (DoS). All sources consistently describe this vulnerability as a remote-tr...
CVE-2018-14017
The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...
openssl: Insufficient TLS session ticket HMAC length checks
An integer underflow flaw leading to a buffer over-read was found in the way OpenSSL parsed TLS session tickets. A remote attacker could use this flaw to crash a TLS server using OpenSSL if it used SHA-512 as HMAC for session tickets...