CVE-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

CVE-2020-22217

Buffer overflow vulnerability in c-ares before 1161 thru 1170 via function aresparsesoareply in aresparsesoareply.c...

CVE-2021-32292

CVE-2021-32292 affects json-c: a stack-buffer-overflow in the auxiliary sample program json_parse (parseit) reported for json-c versions from 0.14 unreleased code up to 0.15-20200726. Connected documents indicate mitigations: Gentoo GLSA-202408-08 recommends upgrading to json-c-0.16 or newer. Ins...

PT-2023-4758 · Json-C +3 · Json-C +3

Name of the Vulnerable Software and Affected Versions: json-c versions 0.14 through 0.15-20200726 Description: A stack-buffer-overflow issue exists in the json parse auxiliary sample program, specifically in the parseit function. This issue is related to a buffer overflow in memory, which can be...

CVE-2022-48064

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfddwarf2findnearestlinewithalt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

PT-2023-6122 · Gnu +5 · Gnu Binutils +5

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions prior to 2.40 Description: The issue is related to a memory leak in the find abstract instance function in dwarf2.c. This can be exploited by a remote attacker to cause a denial of service. Recommendations: For versions...

CVE-2022-48063

The connected sources confirm CVE-2022-48063 affects GNU Binutils prior to 2.40. The vulnerability is an excessive memory consumption issue in the load_separate_debug_files function (dwarf2.c). An attacker could create a crafted ELF file to trigger a DNS-based denial of service. Impact is limited...

CVE-2022-48064

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfddwarf2findnearestlinewithalt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

CVE-2022-48065

CVE-2022-48065 affects GNU Binutils up to version 2.39.x (before 2.40). The vulnerability is a memory leak in the function find_abstract_instance in the file dwarf2.c . The issue can lead to increased memory consumption and, as reported in sources, potential crashes. The connected documents consi...

CVE-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

ZZIPlib 安全漏洞

ZZIPlib is a compressed document extraction library. A security vulnerability exists in ZZIPlib version 0.13.69, which stems from an issue found in the function zzipdiskentrytofileheader in mmapped.c that will result in a denial of service...

CVE-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

json-c 缓冲区错误漏洞

json-c is a C-based JSON parser. A buffer error vulnerability exists in json-c 0.15-20200726 and earlier versions, which stems from a buffer overflow vulnerability in the function parseit. An attacker can exploit this vulnerability to execute arbitrary code...

ncurses 缓冲区错误漏洞

ncurses is a character terminal processing library that provides a set of functions that can be called by the user to generate a text-based user interface. A security vulnerability exists in ncurses version 6.1 due to a buffer overflow in the fmtentry method of progs/dumpentry.c. The vulnerabilit...

CVE-2022-48063

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...

CVE-2020-22217

Buffer overflow vulnerability in c-ares before 1161 thru 1170 via function aresparsesoareply in aresparsesoareply.c...

CVE-2022-48065

GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function findabstractinstance in dwarf2.c...

CVE-2020-22217

Buffer overflow vulnerability in c-ares before 1161 thru 1170 via function aresparsesoareply in aresparsesoareply.c...

Debian: Security Advisory (DSA-5481-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Impact of the New SEC Cyber Incident Reporting Rules on the C-Suite and Beyond

We recently hosted a compact and very engaging panel discussion about the new SEC Cyber Incident Reporting Rules due to come into effect later this year. We were fortunate to be joined by two well-known experts: Sue Bergamo, a CISO, CIO, Board Member, Executive Advisor, and Investor with a track...