Microsoft Windows Redirected Drive Buffering 信息泄露漏洞

Microsoft Windows Redirected Drive Buffering is a Redirected Drive Buffering Subsystem RDBSS from Microsoft Corporation USA provided as the kernel-mode file system driver rdbss.sys, which is included in the operating system, and as the static library rdbsslib.lib provided as the kernel-mode file...

Microsoft Windows Redirected Drive Buffering 权限许可和访问控制问题漏洞

Microsoft Windows Redirected Drive Buffering is a Redirected Drive Buffering Subsystem RDBSS from Microsoft Corporation USA provided as the kernel-mode file system driver rdbss.sys, which is included in the operating system, and as the static library rdbsslib.lib provided as the kernel-mode file...

PT-2021-6297 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to information disclosure in the Windows Redirected Drive Buffering SubSystem Driver. It allows attackers to obtain sensitive information and potentially affect the...

PT-2021-6317 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient access control in the Redirected Drive Buffering System rdbss.sys driver of the Microsoft Windows operating system. It allows an attacker to...

CVE-2021-38371

The STARTTLS feature in Exim through 4.94.2 allows response injection buffering during MTA SMTP sending...

CVE-2021-38371

CVE-2021-38371 affects Exim (STARTTLS) up to version 4.94.2. The vulnerability allows response injection (buffering) during MTA SMTP sending due to how STARTTLS sync point is enforced on the client side. Affected products include Exim in various distributions (Debian/Ubuntu/Amazon Linux/Alpine/Op...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. versions prior to GPAC 0.8.0 have security vulnerabilities that can be exploited by attackers to cause a denial of service via a crafted MP4 file...

Advisory ROSA-SA-2021-1831

Software: evolution-data-server 3.28.5 OS: Cobalt 7.9 CVE-ID: CVE-2020-14928 CVE-Crit: MEDIUM CVE-DESC: From evolution-data-server eds to 3.36.3 there is an issue with STARTTLS buffering that affects SMTP and POP3. When the server sends a "start TLS" response, eds reads additional data and...

SAP NetWeaver AS ABAP Command Injection (June 2021)

A command injection vulnerability exists in SAP NetWeaver AS ABAP due to improperly restricting I/O buffering. An unauthenticated, remote attacker can exploit this, to insert cleartext commands into encrypted SMTP sessions over the network which can partially impact the integrity of the...

CVE-2021-33663

SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83,7.84, allows an unauthorized attacker to insert cleartext commands due to improper...

CVE-2021-33663

SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83,7.84, allows an unauthorized attacker to insert cleartext commands due to improper...

PT-2021-20241 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP versions 7.22 through 7.84 Description: The issue allows an unauthorized attacker to insert cleartext commands into encrypted SMTP sessions over the network due to improper restriction of I/O buffering. This can partiall...

CVE-2021-23011

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, when the BIG-IP system is buffering packet fragments for reassembly, the Traffic Management Microkernel TMM may consume an excessive amount of...

CVE-2021-23011

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, when the BIG-IP system is buffering packet fragments for reassembly, the Traffic Management Microkernel TMM may consume an excessive amount of...

SUSE SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2021:1435-1)

This update for java-170-openjdk fixes the following issues : Update to 2.6.25 - OpenJDK 7u291 January 2021 CPU, bsc1181239 - Security fixes + JDK-8247619: Improve Direct Buffering of Characters - Import of OpenJDK 7 u291 build 1 + JDK-8254177: tz Upgrade time-zone data to tzdata2020b +...

Security Bulletin: Vulnerabilities in WebSphere Application Server affect IBM Rational products based on IBM Jazz technology

Summary There are vulnerabilities in IBM WebSphere Application Server bundled with IBM Jazz Team Server based Applications that affect the following products: Collaborative Lifecycle Management CLM, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manager RELM, Rational Team...

DEBIAN-CVE-2020-35502

A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running out of memory can lead to a system crash...

CVE-2020-35502

A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running out of memory can lead to a system crash...

openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2021-374)

This update for java-180-openjdk fixes the following issues : - Update to version jdk8u282 icedtea 3.18.0 - January 2021 CPU bsc1181239 - Security fixes + JDK-8247619: Improve Direct Buffering of Characters CVE-2020-14803 - Import of OpenJDK 8 u282 build 01 + JDK-6962725: Regtest...

EulerOS 2.0 SP2 : evolution-data-server (EulerOS-SA-2021-1293)

According to the versions of the evolution-data-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - evolution-data-server eds through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a 'begin...