416 matches found
CVE-2021-34550
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of-bounds memory access, and a client crash, via a crafted onion service descriptor...
UBUNTU-CVE-2021-34550
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of-bounds memory access, and a client crash, via a crafted onion service descriptor...
CVE-2021-34550
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of-bounds memory access, and a client crash, via a crafted onion service descriptor...
CVE-2021-34550
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of-bounds memory access, and a client crash, via a crafted onion service descriptor...
Malicious Android application can crash the Nextcloud Android Client
None...
CVE-2021-34813
Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client while it is attempting to retrieve an Olm encrypted room key backup from the homeserver because olmpkdecrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build...
CVE-2020-10742
A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc will cause a kernel panic. The highest threat from this vulnerability is to data confidentiality...
UBUNTU-CVE-2020-10742
A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc will cause a kernel panic. The highest threat from this vulnerability is to data confidentiality...
CVE-2020-10742
CVE-2020-10742 : The Linux kernel vulnerability is an index buffer overflow during Direct IO writes that can cause the NFS client to crash and, in some cases, a kernel panic after a kmalloc memory allocation has a reach-out beyond the allocated buffer. The described impact includes data confident...
AZL-6372 CVE-2021-25217 affecting package dhcp for versions less than 4.4.2-4
In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series are beyond their End-of-Life EOL and no longer supported by ISC. From inspection it is clear that the defect is also present in...
DEBIAN-CVE-2021-25217
In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series are beyond their End-of-Life EOL and no longer supported by ISC. From inspection it is clear that the defect is also present in...
UBUNTU-CVE-2021-25217
In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series are beyond their End-of-Life EOL and no longer supported by ISC. From inspection it is clear that the defect is also present in...
DEBIAN-CVE-2021-29376
ircII before 20210314 allows remote attackers to cause a denial of service segmentation fault and client crash, disconnecting the victim from an IRC server via a crafted CTCP UTC message...
CVE-2021-29376
ircII before 20210314 allows remote attackers to cause a denial of service segmentation fault and client crash, disconnecting the victim from an IRC server via a crafted CTCP UTC message...
CVE-2021-29376
ircII before 20210314 allows remote attackers to cause a denial of service segmentation fault and client crash, disconnecting the victim from an IRC server via a crafted CTCP UTC message...
CVE-2021-29376
ircII before 20210314 allows remote attackers to cause a denial of service segmentation fault and client crash, disconnecting the victim from an IRC server via a crafted CTCP UTC message...
QEMU Code Issue Vulnerability
QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from a code issue vulnerability that stems from a block: fdc: null pointer dereference causing a client crash...
PYSEC-2021-61
clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code on a database client via a crafted server response, due to a buffer overflow...
gnutls: Heap buffer overflow in handshake with no_renegotiation alert sent
A flaw was found in GnuTLS, where the server can trigger the client to run into heap buffer overflow if a norenegotiation alert is sent in an unexpected timing. This flaw allows the client to crash at the session deinitialization timing. The highest threat from this vulnerability is to system...
Updated gnutls packages fix security vulnerability
An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a norenegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application's error handling path, where the...