Vulnerability of the print-bgp.c:bgp_capabilities_print() function in the packet capture and analysis tool tcpdump: This function allows a malicious actor to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability in the print-bgp.c:bgpcapabilitiesprint utility for capturing and analyzing network traffic using tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to information and...

Vulnerability of the print-rx.c:rx_cache_find() function in the packet capture and analysis tool tcpdump: This function allows a intruder to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability in the print-rx.crxcachefind function of the packet capture and analysis tool tcpdump involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to information and compromise its integrity and...

The vulnerability in the print-fr.c:mfr_print() function of the tcpdump utility for capturing and analyzing network traffic allows a malicious actor to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability of the print-fr.c:mfrprint function in the tcpdump utility for capturing and analyzing network traffic is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to information and...

PT-2019-4739 · Php +7 · Php +7

Name of the Vulnerable Software and Affected Versions: PHP versions 7.2.x through 7.2.25 PHP versions 7.3.x through 7.3.12 PHP version 7.4.0 Description: The issue is related to the PHP EXIF extension when parsing EXIF information from an image, for example, via the exif read data function. It is...

Security Bulletin: CVE-2017-3167, CVE-2017-3169, CVE-2017-7659, CVE-2017-7668 and CVE-2017-7679 in IBM i HTTP Server

Summary HTTP Server is supported by IBM i. IBM i has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2017-7679 DESCRIPTION: Apache HTTPD could allow a remote attacker to obtain sensitive information, caused by a buffer overread in modmime. By sending a specially crafted Content-Ty...

freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read

FreeType before 2.6.1 has a buffer over-read in skipcomment in psaux/psobjs.c because psparserskipPStoken is mishandled in an FTNewMemoryFace operation...

freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash

An out-of-bounds buffer overflow flaw was found in FreeType prior to version 2.6.1...

Vulnerability in the print-icmp.c:icmp_print() utility for capturing and analyzing network traffic with tcpdump: This allows a intruder to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability in the print-icmp.c function, specifically the icmpprint utility for capturing and analyzing network traffic using tcpdump, is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to...

The vulnerability of the archive_wstring.AppendFrom_MBS function in the OpenLDAP package allows a hacker to read the memory contents of the system.

The vulnerability of the archivewstringappendfrommbs function in the archivestring.c file of the OpenLDAP package involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to read memory contents using a specially created archive file...

Vulnerability of the print-ldp.c:ldp_tlv_print() utility in tcpdump: a tool for capturing and analyzing network traffic. This vulnerability allows an attacker to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability in the print-ldp.c function, specifically ldptlvprint, a utility for capturing and analyzing network traffic using tcpdump, relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information...

UBUNTU-CVE-2019-19777

stbimage.h aka the stb image loader 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbiloadmain...

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) relates to reading data beyond the buffer in memory, allowing an intruder to disclose protected information.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

PT-2019-15953 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: A heap-based buffer over-read issue was discovered in the load sixel function at loader.c. Recommendations: For libsixel version 1.8.2, at the moment, there is no information about a newer version that...

The vulnerability of the Adobe Type Manager Font Driver (ATMFD.dll) on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Type Manager Font Driver ATMFD.dll in the Windows operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created OpenType font...

The vulnerability of the V8 component in the Google Chrome browser allows attackers to disclose protected information.

The vulnerability of the V8 component in the Google Chrome browser is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information using a specially created PDF file...

The vulnerability of the V8 component in the Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability of the V8 component in Google Chrome browser is related to reading beyond the buffer limit. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially created HTML page...

The vulnerability of Google Chrome’s swiftshader library, which allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s swiftshader library arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Apache HTTP Server web server, related to the occurrence of operations outside the buffer in memory, allows attackers to cause service interruptions.

The vulnerability of the Apache HTTP Server is related to the issue of operations going beyond the buffer in memory after reaching the read size limit for HTTP headers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the PushShortPixel function (MagickCore/quantum-private.h) in the console-based image editing tool ImageMagick allows a hacker to execute arbitrary code.

The vulnerability of the PushShortPixel function MagickCore/quantum-private.h in the console-based ImageMagick graphics editor is caused by reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the ReadSIXELImage function in the console-based image editing tool ImageMagick allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the ReadSIXELImage function in the ImageMagick console-based graphics editor coders/sixel.c arises from reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...