3011 matches found
Huawei EulerOS: Security Advisory for exempi (EulerOS-SA-2019-2575)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
HTTP/2: large amount of data requests leads to denial of service
A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a...
DEBIAN-CVE-2019-14842
Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than the beginning of the request did not work because of signed/unsigned confusion. If one of these chunks contains a...
CVE-2019-14842
Structured reply is a feature of the newstyle NBD protocol allowing the server to send a reply in chunks. A bounds check which was supposed to test for chunk offsets smaller than the beginning of the request did not work because of signed/unsigned confusion. If one of these chunks contains a...
glibc security update
2.28-72.0.1 - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make IOfunlockfile match funlockfile and...
SUSE-SU-2019:2744-2 Security update for openconnect
This update for openconnect fixes the following issues: - CVE-2019-16239: Fixed a buffer overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes. bsc1151178...
UBUNTU-CVE-2019-17542
FFmpeg before 4.2 has a heap-based buffer overflow in vqadecodechunk because of an out-of-array access in vqadecodeinit in libavcodec/vqavideo.c...
FFmpeg Buffer Overflow Vulnerability (CNVD-2020-13570)
FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A heap buffer overflow vulnerability exists in vqadecodechunk in versions of FFmpeg prior to 4.2, which can be exploited by an attacker to cause a...
DEBIAN-CVE-2019-16239
processhttpresponse in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes...
Buffer overflow
processhttpresponse in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes...
Discourse < 2.4.0.beta3 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities including CSRF flaws. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2019-5883
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 4.2 Description The issue is related to a heap-based buffer overflow in the vqa decode chunk function due to an out-of-array access in the vqa decode init function in libavcodec/vqavideo.c. This can allow a remote...
Denial Of Service (DoS)
exempi is vulnerable to denial of service DoS. The vulnerability exists through an infinite Loop in Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp...
exiv2: SIGABRT caused by memory allocation in types.cpp:Exiv2::Internal::PngChunk::zlibUncompress()
In types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at memory allocation for an Exiv2::Internal::PngChunk::zlibUncompress call...
exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp
In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunkint.cpp may cause a denial of service application crash due to a heap-based buffer over-read via a crafted PNG file...
exempi: Infinite Loop in Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp
An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote attackers to cause a denial of service infinite loop via crafted XMP data in a .avi file...
Exploit for CVE-2019-2525
VirtualBox 6.0.0 Exploit 1-day 사용할 VBox bug - CVE-2019-2525...
AZL-45102 CVE-2017-12652 affecting package openjpeg2 2.3.1-12
libpng before 1.6.32 does not properly check the length of chunks against the user limit...