Lucene search
+L

5366 matches found

osv_alsa
osv_alsa
•added 2023/09/11 12:00 a.m.•37 views

ALSA-2023:5048 Important: flac security update

FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files...

7.8CVSS7.4AI score0.00794EPSS
SaveExploits1References4
osv_alsa
osv_alsa
•added 2023/09/11 12:00 a.m.•47 views

ALSA-2023:5046 Important: flac security update

FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files...

7.8CVSS7.4AI score0.00794EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
•added 2023/09/11 12:00 a.m.•51 views

Important: flac security update

FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files...

7.8CVSS7.4AI score0.00794EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
•added 2023/09/11 12:00 a.m.•54 views

Important: flac security update

FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files...

7.8CVSS7.4AI score0.00794EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2023/09/07 12:00 a.m.•27 views

Debian GNU/Linux AV1 DoS

The vulnerability of the av1/av1dxiface.c component in the library that implements the AV1 codec in the Debian GNU/Linux operating system is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

7.1CVSS7.1AI score0.01485EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2023/09/07 12:00 a.m.•26 views

AV1 codec Partition Search Heap Buffer Overflow DoS

The vulnerability of the partitionsearch.h component in the library that implements the AV1 codec in the Debian GNU/Linux operating system is due to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

9.3CVSS9AI score0.01772EPSS
SaveExploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
•added 2023/09/07 12:00 a.m.•23 views

aom_image.c AV1 Code Execution

The vulnerability of the aomimage.c component in the library, which implements the AV1 codec, in the Debian GNU/Linux operating system is related to incorrect handling of hard links. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS9.3AI score0.0205EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
•added 2023/09/07 12:00 a.m.•19 views

rate Hist AV1 Null Pointer DoS

The vulnerability of the rate Hist component in the ratehist.c library, which implements the AV1 codec for the Debian GNU/Linux operating system, is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

7.1CVSS7.1AI score0.01485EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
•added 2023/09/07 12:00 a.m.•24 views

aom_dsp/grain_table.c AV1 Code Execution

The vulnerability of the aomdsp/graintable.c component in the library, which implements the AV1 codec, in the Debian GNU/Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

10CVSS9.3AI score0.01885EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
•added 2023/09/07 12:00 a.m.•20 views

AV1 codec Heap Buffer Overflow DoS

The vulnerability in the stats/ratehist.c component of the library, which implements the AV1 codec for the Debian GNU/Linux operating system, relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker, working remotely, to execute arbitrary co...

9.3CVSS8.8AI score0.01772EPSS
SaveExploits1References11Affected Software4
IBM Security Bulletins
IBM Security Bulletins
•added 2023/09/06 5:51 p.m.•40 views

Security Bulletin: Multiple vulnerabilities in commons-codec-1.10.jar affect IBM Application Performance Management products

Summary There are multiple vulnerabilities in commons-codec-1.10.jar used by IBM Application Performance Management. IBM Applicatoon Performance Management has addressed the applicable CVEs. Vulnerability Details IBM X-Force ID: 177835 DESCRIPTION: Apache Commons Codec could allow a remote attack...

6.8AI score
SaveExploits0Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2023/09/06 12:00 a.m.•7 views

VulnCheck KEV: CVE-2023-4863

Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec...

8.8CVSS7.5AI score0.99979EPSS
SaveIn wildExploits9References10
Debian
Debian
•added 2023/09/05 10:37 p.m.•147 views

[SECURITY] [DSA 5490-1] aom security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5490-1 [email protected] https://www.debian.org/security/ Markus Koschany September 06, 2023 https://www.debian.org/security/faq -...

9.8CVSS7.4AI score0.02216EPSS
SaveExploits4
IBM Security Bulletins
IBM Security Bulletins
•added 2023/09/05 12:27 p.m.•21 views

Security Bulletin: Vulnerability found in commons-codec-1.5.jar which is shipped with IBM® Intelligent Operations Center(177835)

Summary Vulnerability have been identified in commons-codec-1.5.jar which is shipped with IBM® Intelligent Operations Center. Information about this vulnerability affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs. Vulnerability Details IBM X-Force...

6.6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/09/04 12:00 a.m.•13 views

FreeRDP RDP Buffer Overflow DoS

The vulnerability in the libfreerdp/codec/rfx.c component of the RDP client FreeRDP is related to the issue where operations are performed outside of the buffer boundaries in memory when processing parameters tile-quantIdxY, tile-quantIdxCb, and tile-quantIdxCr. Exploiting this vulnerability can...

5.3CVSS7.9AI score0.01476EPSS
SaveExploits1References10Affected Software3
NVD
NVD
•added 2023/08/31 9:15 p.m.•36 views

CVE-2023-39353

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the libfreerdp/codec/rfx.c file there is no offset validation in tile-quantIdxY, tile-quantIdxCb, a...

9.1CVSS7AI score0.01476EPSS
SaveExploits1References8
osv_debian
osv_debian
•added 2023/08/31 9:15 p.m.•17 views

DEBIAN-CVE-2023-39353

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the libfreerdp/codec/rfx.c file there is no offset validation in tile-quantIdxY, tile-quantIdxCb, a...

9.1CVSS6.7AI score0.01476EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2023/08/31 9:15 p.m.•23 views

UBUNTU-CVE-2023-39353

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the libfreerdp/codec/rfx.c file there is no offset validation in tile-quantIdxY, tile-quantIdxCb, a...

9.1CVSS6.7AI score0.01476EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2023/08/31 8:04 p.m.•70 views

CVE-2023-39353 Missing offset validation leading to Out Of Bound Read in FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the libfreerdp/codec/rfx.c file there is no offset validation in tile-quantIdxY, tile-quantIdxCb, a...

5.3CVSS9.4AI score0.01476EPSS
SaveExploits1References7
Mend
Mend
•added 2023/08/31 8:04 p.m.•10 views

CVE-2023-39353

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to a missing offset validation leading to Out Of Bound Read. In the libfreerdp/codec/rfx.c file there is no offset validation in tile-quantIdxY, tile-quantIdxCb, a...

9.1CVSS6.7AI score0.01476EPSS
SaveExploits1References12
Rows per page
Query Builder