Denial Of Service (DoS)

cryptacular is vulnerable to denial of service. Failure to validate the nonce array length associated with new byte allows an attacker to cause excessive memory allocation on the system during a decode operation, potentially resulting in an application crash...

Ecommerce Systempay 1.0 - Production KEY Brute Force Exploit

Exploit for php platform in category web applications Exploit Title: Ecommerce Systempay 1.0 - Production KEY Brute Force Author: live3 Vendor Homepage: https://paiement.systempay.fr/doc/fr-FR/ Software Link: https://paiement.systempay.fr/doc/fr-FR/module-de-paiement-gratuit/ Tested on: MacOs...

UBUNTU-CVE-2015-8011

Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...

ALPINE-CVE-2020-8112

opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...

DEBIAN-CVE-2020-8112

opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...

AZL-44577 CVE-2020-8112 affecting package openjpeg2 for versions less than 2.3.1-12

opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...

UBUNTU-CVE-2020-8112

opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...

openjpeg: Heap-based buffer overflow in opj_t1_clbl_decode_processor()

A heap-based buffer overflow flaw was found in openjpeg in the opjt1clbldecodeprocessor in libopenjp2.so. Affecting versions through 2.3.1, the highest threat from this vulnerability is to file confidentiality and integrity as well as system availability...

PT-2020-2776 · Openjpeg +6 · Openjpeg +6

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions 2.3.1 through 2020-01-28 Description: The issue is related to a heap-based buffer overflow in the opj t1 clbl decode processor function of the OpenJPEG library, specifically in the openjp2/t1.c file when qmfbid==1. This can ...

CVE-2020-7226

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...

CVE-2020-7226

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...

CVE-2020-7595

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

PT-2020-19361 · Unknown +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: libIEC61850 versions prior to 1.4.1 Description: The issue arises from a heap-based buffer overflow in the MmsValue decodeMmsData function when parsing the MMS BIT STRING data type. This occurs in the mms/iso mms/server/mms access result.c fi...

ALPINE-CVE-2020-6851

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c because of lack of opjj2kupdateimagedimensions validation...

OpenJPEG heap buffer overflow vulnerability (CNVD-2020-02456)

OpenJPEG is a C-based open source JPEG2000 codec . A buffer overflow vulnerability exists in the 'opjt1clbldecodeprocessor' function in the libopenjp2.so file in OpenJPEG 2.3.1 and earlier versions. The vulnerability stems from a networked system or product performing operations in memory without...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2020-04068)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in copycompressedbytes in decoder2007.c in LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...

GNU LibreDWG Memory Allocation Failure Vulnerability

LibreDWG is a free C library for reading and writing DWG files. A memory allocation failure vulnerability exists in readsectionsmap in decoder2007.c in LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to allocate too much memory in readsectionsmap in decoder2007.c...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2020-04064)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in readpagesmap in decoder2007.c in GNU LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...

Heap overflow

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in readpagesmap in decoder2007.c...

PT-2020-19179 · Gnu +1 · Gnu Libredwg +1

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.9.3.2564 Description: The issue is related to a heap-based buffer over-read in the copy compressed bytes function located in decode r2007.c. Recommendations: For GNU LibreDWG version 0.9.3.2564, consider updating to a...