7003 matches found
USN-4860-1: Monit vulnerabilities
Zack Flack discovered that Monit incorrectly handled certain input. A remote authenticated user could exploit this to conduct cross-site scripting XSS attacks. CVE-2019-11454 Zack Flack discovered a buffer overread when Monit decoded certain crafted URLs. An attacker could exploit this to...
QEMU Hardware Emulation Heap Buffer Overflow DoS
The vulnerability of the atimmread function in the hw/display/ati.c file of the QEMU hardware emulation software is related to reading data beyond the acceptable buffer limits. Exploiting this vulnerability can allow an attacker to cause a system failure...
FreeRDP Heap Buffer Overflow DoS
The vulnerability of the PRIMARYDRAWINGORDERFIELDBYTES function in the FreeRDP remote desktop protocol implementation is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service interruptions...
FreeRDP glyph_cache_put Buffer Overflow DoS
The vulnerability of the glyphcacheput component in the implementation of the remote desktop protocol FreeRDP is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data and also cause service...
Poppler PDF Rendering Library Heap Buffer Overflow DoS
The vulnerability of the Splash::blitTransparent function splash/Splash.cc in the Poppler PDF rendering library is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and cause servi...
uIP TCP/IP Stack DoS
The vulnerability of the upperlayerchksum function in the net/ipv4 /uip.c part of the uIP TCP/IP Stack of the Contiki OS framework is related to the reading of data beyond the specified buffer. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...
FreeRDP RLEDECOMPRESS Information Disclosure
The vulnerability of the RLEDECOMPRESS component in the FreeRDP remote desktop protocol is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and also cause service failures...
FreeRDP PRIMARY_DRAWING_ORDER_FIELD_BYTES Buffer Overflow DoS
The vulnerability of the PRIMARYDRAWINGORDERFIELDBYTES function in the FreeRDP remote desktop protocol implementation is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service interruptions...
TrioParse Remote Desktop Protocol DoS
The vulnerability of the TrioParse component in the FreeRDP remote desktop protocol lies in its ability to read data from a buffer beyond acceptable limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data and also cause service failures...
LuaJIT Heap Buffer Overflow DoS
The vulnerability of the static ptrdifft finderrfunc function in the src/ljerr.c file of the LuaJIT compiler for the Lua programming language is related to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
poppler/CairoRescaleBox.cc Heap Buffer Overflow DoS
The vulnerability of the downsamplerowboxfilterf function in the poppler/CairoRescaleBox.cc library, which is used for displaying PDF files, involves reading data beyond the allowable buffer size. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its...
UBUNTU-CVE-2020-36281
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c...
DEBIAN-CVE-2020-36278
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c...
UBUNTU-CVE-2020-36278
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c...
UBUNTU-CVE-2020-36280
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c...
PT-2021-4617 · Leptonica +1 · Leptonica +1
Name of the Vulnerable Software and Affected Versions: Leptonica versions prior to 1.80.0 Description: The issue is related to a heap-based buffer over-read in the findNextBorderPixel function in ccbord.c. This can potentially allow a remote attacker to cause a denial of service. Recommendations:...
Dan Bloomberg Leptonica buffer error vulnerability
Dan Bloomberg Leptonica is a Dan Bloomberg open source application. It provides basic image processing and image analysis operations. A security vulnerability exists in Leptonica before 1.80.0, which stems from adaptmap reg.c and adaptmap.c and results in a heap-based buffer overread...
OESA-2021-1070 python-pillow security update
Pillow is the friendly PIL fork by Alex Clark and Contributors. PIL is the Python Imaging \ Library by Fredrik Lundh and Contributors. As of 2019, Pillow development is supported by Tidelift. Security Fixes: In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file...
Luxion KeyShot Code Execution
The vulnerability of the 3D model rendering software programs Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code during the...
Qualcomm closed-source component security vulnerabilities
A security vulnerability exists in the Qualcomm Closed Source component that stems from the absence of a NULL termination check on the SDP, where a buffer over-read may occur when parsing received SDP values...