netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data

A flaw was found in Netty's netty-codec due to size restrictions for decompressed data in the Bzip2Decoder. By sending a specially-crafted input, a remote attacker could cause a denial of service...

Speex Dezero Error Vulnerability

Speex is an open source audio codec. version 1.2 of Speex is vulnerable to a divide by zero error in the static int readsamples function. An attacker can exploit the vulnerability to cause a denial of service via a specially crafted WAV file...

CVE-2020-23890

A buffer overflow in WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted JPG file. Related to Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at JPGCodec+0x753648...

Moderate: Red Hat Security Advisory: Red Hat build of Eclipse Vert.x 4.1.5 security update

An update is now available for Red Hat build of Eclipse Vert.x. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more...

PT-2021-23611 · Unknown +2 · Clickhouse +1

Name of the Vulnerable Software and Affected Versions: Clickhouse affected versions not specified Description: The issue is related to a divide-by-zero error in Clickhouse's Delta compression codec. This error occurs when parsing a malicious query, where the first byte of the compressed buffer is...

PT-2021-23612 · Unknown +2 · Clickhouse +1

Name of the Vulnerable Software and Affected Versions: Clickhouse affected versions not specified Description: The issue is related to a divide-by-zero error in Clickhouse's DeltaDouble compression codec. This occurs when parsing a malicious query, where the first byte of the compressed buffer is...

CVE-2021-42391

Divide-by-zero in ClickHouse’s Gorilla compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0. JFrog Security Research Team...

CVE-2021-42390

Divide-by-zero in ClickHouse’s DeltaDouble compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0. JFrog Security Research Team...

PT-2021-23613 · Unknown +2 · Clickhouse +1

Name of the Vulnerable Software and Affected Versions: ClickHouse affected versions not specified Description: The issue is related to a divide-by-zero error in ClickHouse's Gorilla compression codec. This occurs when parsing a malicious query, where the first byte of the compressed buffer is use...

Security Bulletin: IBM Cognos Analytics with Watson 11.2.1 has addressed multiple vulnerabilities

Summary Security vulnerabilities have been addressed in IBM Cognos Analytics with Watson 11.2.1 Vulnerability Details CVEID: CVE-2017-12620 DESCRIPTION: Apache OpenNLP could allow a remote attacker to obtain sensitive information, caused by an XXE attack when loading models or dictionaries that...

SELA heap buffer overflow vulnerability

SELA is a lossless audio codec. a heap buffer overflow vulnerability exists in file::WavFile::writeToFile in wavfile.c in SELA 20200412 and earlier versions. No detailed vulnerability details are currently available...

SELA Heap Buffer Overflow Vulnerability (CNVD-2021-73936)

SELA is a lossless audio codec. file::SelaFile::readFromFile in selafile.c in SELA 20200412 and earlier versions is vulnerable to a heap buffer overflow. No detailed vulnerability details are available at this time...

SELA null pointer dereference vulnerability (CNVD-2021-73934)

SELA is a lossless audio codec. A null pointer dereference vulnerability exists in the file::WavFile::WavFile function in wavfile.c in SELA 20200412 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service...

SELA null pointer dereference vulnerability (CNVD-2021-73930)

SELA is a lossless audio codec. a null pointer dereference vulnerability exists in the rice::RiceDecoder::process function in ricedecoder.c in SELA 20200412 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...

SELA Heap Buffer Overflow Vulnerability (CNVD-2021-73935)

SELA is a lossless audio codec. file::SelaFile::readFromFile in selafile.cpp in SELA 20200412 and earlier versions is vulnerable to a heap buffer overflow. No detailed vulnerability details are currently available...

SELA Heap Buffer Overflow Vulnerability (CNVD-2021-73931)

SELA is a lossless audio codec. a heap buffer overflow vulnerability exists in rice::RiceDecoder::process in ricedecoder.cpp in SELA 20200412 and earlier versions. No detailed vulnerability details are currently available...

SELA null pointer dereference vulnerability (CNVD-2021-73932)

SELA is a lossless audio codec. lpc::SampleGenerator::process function in samplegenerator.cpp in SELA 20200412 and earlier versions is vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service...

SELA null pointer dereference vulnerability (CNVD-2021-73933)

SELA is a lossless audio codec. A null pointer dereference vulnerability exists in the frame::FrameDecoder::process function in framedecoder.c in SELA 20200412 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...

Sela 缓冲区错误漏洞

SELA is a lossless audio codec. a heap buffer overflow vulnerability exists in rice::RiceDecoder::process in ricedecoder.cpp in SELA 20200412 and earlier versions. No detailed vulnerability details are currently available...

Sela 代码问题漏洞

SELA is a lossless audio codec. A null pointer dereference vulnerability exists in the frame::FrameDecoder::process function in framedecoder.c in SELA 20200412 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...