95 matches found
cbor2 安全漏洞
cbor2 is a library with extensive tag support for encoding and decoding binary object representations in serialized format by the individual developer Alex Grönholm. A security vulnerability exists in cbor2 version 5.7.0 and earlier, which stems from an integer overflow and memory leak in the...
CVE-2025-64076
Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decodedefinitelongstring function of the C extension decoder source/decoder.c: 1 Integer Underflow Leading to Out-of-Bounds Read CWE-191, CWE-125: An incorrect variable reference and missing state reset in the chunk processing...
CVE-2025-64076
Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decodedefinitelongstring function of the C extension decoder source/decoder.c: 1 Integer Underflow Leading to Out-of-Bounds Read CWE-191, CWE-125: An incorrect variable reference and missing state reset in the chunk processing...
EUVD-2025-198054
Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decodedefinitelongstring function of the C extension decoder source/decoder.c: 1 Integer Underflow Leading to Out-of-Bounds Read CWE-191, CWE-125: An incorrect variable reference and missing state reset in the chunk processing...
CVE-2025-64076
Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decodedefinitelongstring function of the C extension decoder source/decoder.c: 1 Integer Underflow Leading to Out-of-Bounds Read CWE-191, CWE-125: An incorrect variable reference and missing state reset in the chunk processing...
EUVD-2024-0204
Malicious code in bioql PyPI...
Fedora: Security Advisory (FEDORA-2024-e63fc9eb58)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
python311-cbor2-5.6.5-2.1 on GA media (moderate)
python311-cbor2-5.6.5-2.1 on GA media Announcement ID: openSUSE-SU-2025:14733-1 Rating: moderate Cross-References: CVE-2024-26134 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
OPENSUSE-SU-2025:14733-1 python311-cbor2-5.6.5-2.1 on GA media
These are all security issues fixed in the python311-cbor2-5.6.5-2.1 package on the GA media of openSUSE Tumbleweed...
Fedora 41 : python-cbor2 (2024-e63fc9eb58)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-e63fc9eb58 advisory. Automatic update for python-cbor2-5.6.2-1.fc41. Changelog Mon Apr 8 2024 Fabian Affolter - 5.6.2-1 - Update to latest upstream release closes rhbz2261550,...
Fedora: Security Advisory for python-cbor2 (FEDORA-2024-0c9aaeb447)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-619ac47ce9)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-4bbd13d425)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 40 : python-cbor2 (2024-619ac47ce9)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-619ac47ce9 advisory. Update to latest upstream release closes rhbz2261550, closes rhbz2245361 Tenable has extracted the preceding description block directly from the Fedora...
[SECURITY] Fedora 39 Update: python-cbor2-5.6.2-1.fc39
This library provides encoding and decoding for the Concise Binary Object Representation CBOR RFC 7049 serialization format...
[SECURITY] Fedora 38 Update: python-cbor2-5.6.2-1.fc38
This library provides encoding and decoding for the Concise Binary Object Representation CBOR RFC 7049 serialization format...
Fedora 39 : python-cbor2 (2024-4bbd13d425)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-4bbd13d425 advisory. Update to latest upstream release closes rhbz2261550, closes rhbz2245361 Tenable has extracted the preceding description block directly from the Fedora...
Fedora 38 : python-cbor2 (2024-0c9aaeb447)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-0c9aaeb447 advisory. Update to latest upstream release closes rhbz2261550, closes rhbz2245361 Tenable has extracted the preceding description block directly from the Fedora...
GHSA-375G-39JQ-VQ7M Potential buffer overflow in CBOR2 decoder
Summary Ever since https://github.com/agronholm/cbor2/pull/204 or specifically https://github.com/agronholm/cbor2/commit/387755eacf0be35591a478d3c67fe10618a6d542 was merged, I can create a reproducible crash when running the snippet under PoC on a current Debian bullseye aarm64 on a Raspberry Pi ...
Potential buffer overflow in CBOR2 decoder
Summary Ever since https://github.com/agronholm/cbor2/pull/204 or specifically https://github.com/agronholm/cbor2/commit/387755eacf0be35591a478d3c67fe10618a6d542 was merged, I can create a reproducible crash when running the snippet under PoC on a current Debian bullseye aarm64 on a Raspberry Pi ...