316 matches found
GLSA-202210-37 : PJSIP: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202210-37 PJSIP: Multiple Vulnerabilities - PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP before...
libxml2 输入验证错误漏洞
libxml2 is an open source library used to parse XML documents . It is written in C and can be called by many languages, such as C, C++, XSH. An input validation error vulnerability exists in libxml2. No information about this vulnerability is available at this time, please stay tuned to CNNVD or...
The vulnerability of C and C++ garbage collectors using Boehm-Demers-Weiser GC allows a intruder to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of garbage collectors in C and C++ languages, such as Boehm-Demers-Weiser GC, involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and ev...
PBC 安全漏洞
PBC is a Google Protocol Buffer Library for C from the individual developers at cloudwu in China. A denial of service vulnerability exists in PBC 2022-8-27 and prior versions, which stems from a segmentation error in the PBCwmessageinteger function in src/wmessage.c:137. An attacker could exploit...
OTFCC 安全漏洞
OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC has a security vulnerability that stems from a segmentation violation located at its /lib/x8664-linux-gnu/libc.so.6 0xbb384. No detailed vulnerability details are currently available...
AZL-10467 CVE-2022-35737 affecting package sqlite for versions less than 3.39.2-1
SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API...
UltraJSON 安全漏洞
UltraJSON is an open source, ultra-fast JSON encoder and decoder written in pure C and bundled with Python 3.7+. A security vulnerability exists in versions of UltraJSON prior to 5.4.0, which stems from an inability to properly decode certain characters, allowing for potential key obfuscation and...
The vulnerability of microprogrammed software in PACsystems programmable logic controllers, related to insufficient verification of data authenticity, allows a intruder to execute arbitrary code.
The vulnerability of microprogrammed programmable logic controllers from PACsystems is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary code using a specially crafted file written in...
GNU LibreDWG Stack Overflow Vulnerability
GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG is vulnerable to a stack overflow vulnerability, for which no detailed vulnerability details are currently available...
GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52257)
GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...
GNU LibreDWG Double Release Vulnerability (CNVD-2022-52258)
GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a double-release vulnerability, for which no detailed vulnerability details are currently available...
GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2022-52252)
GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...
libredwg 资源管理错误漏洞
GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG is vulnerable to a resource management error, and no details of the vulnerability are currently available...
p0insettia
It is an offensive tool for iOS jailbreak. The tool, named p0insettia, is designed to perform a tethered jailbreak on iOS 10.3.4 32-bit devices, specifically the iPhone 5, using the checkm8 BootROM exploit. The tool is written in C and uses the libcurl library for network operations. The code is...
Stack overflow
PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts PJSIP users who accept hashed digest credentials credentials with datatype PJSIPCREDDATADIGEST...
libxml2 Resource Management Error Vulnerability (CNVD-2022-21487)
libxml2 is an open source library for parsing XML documents. It is written in C and can be called by multiple languages, such as C, C, XSH. libxml2 suffers from a resource management error vulnerability that can be exploited by attackers to threaten alerts that affect software or systems...
CVE-2022-23608
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions up to and including 2.11.1 when in a dialog set or forking scenario, a hash key shared by multiple UAC dialogs can...
Expat 输入验证错误漏洞
Expat is a fast streaming XML parser written in C. Expat is vulnerable to an integer overflow vulnerability that stems from an integer overflow in copyString. No detailed vulnerability details are currently available...
Jsish Denial of Service Vulnerability (CNVD-2022-11167)
Jsish is a small JavaScript parser with a built-in database written in C. A security vulnerability exists in Jsish v3.5.0, which could lead to a denial of service DoS...