2338 matches found
kernel: DoS in sctp_addto_chunk in net/sctp/sm_make_chunk.c
A flaw was found in the sctpmakestrresetreq function in net/sctp/smmakechunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUGON issue, leading to a denial of service DOS...
DEBIAN-CVE-2022-1350
A vulnerability classified as problematic was found in GhostPCL 9.55.0. This vulnerability affects the function chunkfreeobject of the file gsmchunk.c. The manipulation with a malicious file leads to a memory corruption. The attack can be initiated remotely but requires user interaction. The...
How to Create Application Firewall Policy for Chunk Requests to Bypass Application Firewall on Citrix ADC 8.1-9.3
This article describes how to create application firewall policy for chunk requests to bypass Application Firewall module. Background In NetScaler software release 8.1 to 9.3 the Application Firewall module does not support chunked request. As a workaround you can create an Application Firewall...
PT-2022-7650 · Puma +11 · Puma +11
Name of the Vulnerable Software and Affected Versions: Puma versions prior to 4.3.12 Puma versions prior to 5.6.4 Description: The issue is related to the handling of HTTP requests in Puma, a server for Ruby/Rack applications. When Puma is used behind a proxy that does not properly validate...
DEBIAN-CVE-2022-24761
Waitress is a Web Server Gateway Interface server for Python 2 and 3. When using Waitress versions 2.1.0 and prior behind a proxy that does not properly validate the incoming HTTP request matches the RFC7230 standard, Waitress and the frontend proxy may disagree on where one request starts and...
Double Free
Overview Affected versions of this package are vulnerable to Double Free via the component sixelchunkdestroy at /root/libsixel/src/chunk.c. Remediation There is no fixed version for libsixel. References - GitHub Issue...
PT-2022-8948 · Saitoha · Libsixel
Name of the Vulnerable Software and Affected Versions: saitoha libsixel version 1.8.6 Description: A double free issue was discovered in the sixel chunk destroy component at /root/libsixel/src/chunk.c. Recommendations: For saitoha libsixel version 1.8.6, at the moment, there is no information abo...
netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way
A flaw was found in the Netty's netty-codec due to unrestricted chunk lengths in the SnappyFrameDecoder. By sending a specially-crafted input, a remote attacker could cause excessive memory usage resulting in a denial of service...
Mageia: Security Advisory (MGASA-2021-0115)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2014-0314)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2016-0337)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEBIAN-CVE-2021-45764
GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shiftchunkoffsets.isra...
CVE-2021-45764
GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shiftchunkoffsets.isra...
UBUNTU-CVE-2021-45764
GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shiftchunkoffsets.isra...
GPAC 缓冲区错误漏洞
GPAC is an open source multimedia framework. GPAC has a security vulnerability that stems from the discovery, via the function shiftchunkoffsets.isra, that GPAC v1.1.0 contains an invalid memory address dereference. No detailed vulnerability details are currently available...
PT-2022-12394 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 1.1.0 Description: An issue was discovered in GPAC, where an invalid memory address dereference occurs via the function shift chunk offsets.isra. Recommendations: For GPAC version 1.1.0, at the moment, there is no information abo...
GHSA-P62J-HRXM-XCXF Book page text, count, and author/title length is not limited in PocketMine-MP
Impact Players can fill book pages with as many characters as they like; the server does not check this. In addition, the maximum of 50 pages is also not enforced, meaning that players can create "book bombs". This causes a variety of problems: - Oversized NBT on the wire costing excess bandwidth...
CVE-2021-46039
A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shiftchunkoffsets.part function, which causes a Denial of Service context-dependent...
PT-2022-12520 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Pointer Dereference issue exists via the shift chunk offsets.part function, which causes a Denial of Service. This issue is context-dependent. Recommendations: For GPAC version 1.0.1, as a temporary workaroun...