6765 matches found
CVE-2020-11725: Incorrect Type Conversion or Cast
sndctlelemadd in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info-owner line, which later affects a privatesizecount multiplication for unspecified "interesting side effects." NOTE: kernel engineers dispute this finding, because it could be relevant only if new callers were...
Denial Of Service (DoS)
dbus is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way the D-Bus library handled endianness conversion when receiving messages. A local user could use this flaw to send a specially-crafted message to dbus-daemon or to a service using the bus, such as...
Denial Of Service (DoS)
tetex is vulnerable to denial of service DoS. The vulnerability exists as multiple array index errors were found in the way teTeX converted DVI files into the Portable Network Graphics PNG format. An attacker could create a malicious DVI file that would cause the dvipng executable to crash...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as CIFS clients convert Unicode strings sent by a server to their local character sets, and then write those strings into memory. If a malicious server sent a long enough string, it could write past the end of the target memo...
Denial Of Service (DoS)
postgresql is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way PostgreSQL handles encoding conversion. A remote, authenticated user could trigger an encoding conversion failure, possibly leading to a temporary denial of service...
An update that provides new APIs for conversion between local time and UTC in Windows 7 or in Windows Server 2008 R2 is available
An update that provides new APIs for conversion between local time and UTC in Windows 7 or in Windows Server 2008 R2 is available INTRODUCTION This article introduces an update that provides new APIs for conversion between local time and Coordinated Universal Time UTC in Windows 7 or in Windows...
Platform Update Supplement for Windows Vista and for Windows Server 2008
Platform Update Supplement for Windows Vista and for Windows Server 2008 INTRODUCTION The Platform Update Supplement for Windows Vista and for Windows Server 2008 is available. This update provides fixes and improvements to graphics, media foundation and print functionality in Windows Vista Servi...
shiftfs DoS
The vulnerability of the shiftfs component in the Linux operating system’s kernel is related to a data type conversion error. Exploiting this vulnerability can allow an attacker to cause a service failure...
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2020-1341)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-12393
A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could result in allocating a buffer too small for the conversion. This leads to a possible out-of-bounds write. Note: 64-bit builds are not vulnerab...
Microsoft Dynamics 365 Business Central Code Execution
The vulnerability of Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to data type conversion deficiencies. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by connecting to the malicious client...
samba: Crash after failed character conversion at log level 3 or above
A flaw was found in samba. When log levels are set at 3 or higher, the string obtained from the client, after a failed character conversion, is printed which could cause long-lived processes to terminate. The highest threat from this vulnerability is to system availability...
EulerOS 2.0 SP5 : nettle (EulerOS-SA-2020-1313)
According to the version of the nettle packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS1 v1.5...
Python -- multiple vulnerabilities
Python reports: gh-95778: Converting between int and str in bases other than 2 binary, 4, 8 octal, 16 hexadecimal, or 32 such as base 10 decimal now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic...
GHSA-QFC5-MCWQ-26Q8 Double Free in psutil
psutil aka python-psutil through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object...
PT-2020-1891
Name of the Vulnerable Software and Affected Versions Microsoft Dynamics Business Central affected versions not specified Description A remote code execution issue exists, related to data type conversion weaknesses. This can be exploited by a remote attacker to execute arbitrary code by connectin...
libheif:file-fuzzer: Heap-buffer-overflow in Op_YCbCr422_to_RGB_16bit::convert_colorspace
Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=6192842948214784 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...
IonMonkey JIT Compiler Type Conversion DoS
The vulnerability of the IonMonkey Just-In-Time compiler for Thunderbird email clients, as well as for Firefox and Firefox ESR browsers, is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions through the use of specially...
EulerOS 2.0 SP8 : samba (EulerOS-SA-2020-1179)
According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18...
