Lucene search
+L

3286 matches found

RustSec
RustSec
added 2018/08/25 12:0 p.m.26 views

Malicious input could cause uninitialized memory to be exposed

Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could b...

6.5CVSS2.7AI score0.01372EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2018/08/25 12:0 p.m.39 views

RUSTSEC-2018-0004 Malicious input could cause uninitialized memory to be exposed

Affected versions of Claxon made an invalid assumption about the decode buffer size being a multiple of a value read from the bitstream. This could cause parts of the decode buffer to not be overwritten. If the decode buffer was newly allocated and uninitialized, this uninitialized memory could b...

6.5CVSS6.5AI score0.01372EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/08/08 12:0 a.m.6 views

HDF5 Buffer Overflow Vulnerability

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A buffer overflow vulnerability exists in the 'H5Osdspacedecode' function of the H5Osdspace.c file in HDF5 version 1.8.20. An...

8.8CVSS9.5AI score0.01561EPSS
SaveExploits0References1
Prion
Prion
added 2018/07/31 9:29 p.m.19 views

Heap overflow

The URL percent-encoding decode function in libcurl before 7.51.0 is called curleasyunescape. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get...

7.5CVSS6.9AI score0.0467EPSS
SaveExploits0References9Affected Software1
Debian CVE
Debian CVE
added 2018/07/31 9:0 p.m.27 views

CVE-2016-8622

The URL percent-encoding decode function in libcurl before 7.51.0 is called curleasyunescape. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get...

9.8CVSS7.4AI score0.0467EPSS
SaveExploits0
OSV
OSV
added 2018/07/20 3:29 p.m.7 views

DEBIAN-CVE-2018-14460

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c...

8.8CVSS7.3AI score0.01561EPSS
SaveExploits0References1
OSV
OSV
added 2018/07/20 3:29 p.m.6 views

UBUNTU-CVE-2018-14460

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c...

8.8CVSS7.5AI score0.01561EPSS
SaveExploits0References3
OSV
OSV
added 2018/07/20 12:29 a.m.6 views

DEBIAN-CVE-2018-14435

ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c...

6.5CVSS7.5AI score0.02109EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2018/07/20 12:0 a.m.43 views

FreeBSD : mutt/neomutt -- multiple vulnerabilities (fe12ef83-8b47-11e8-96cc-001a4a7ec6be)

NeoMutt report : DescriptionCVE-2018-14349 NO Response Heap Overflow CVE-2018-14350 INTERNALDATE Stack Overflow CVE-2018-14351 STATUS Literal Length relative write CVE-2018-14352 imapquotestring off-by-one stack overflow CVE-2018-14353 imapquotestring int underflow CVE-2018-14354 imapsubscribe...

9.8CVSS7.4AI score0.06229EPSS
SaveExploits0References17
OSV
OSV
added 2018/07/19 12:0 a.m.7 views

UBUNTU-CVE-2018-14435

ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c...

6.5CVSS6.7AI score0.02109EPSS
SaveExploits1References3
CNVD
CNVD
added 2018/07/16 12:0 a.m.5 views

Libsixel Memory Disclosure Vulnerability

libsixel is a SIXEL encoder/decoder implementation. The 'sixeldecoderdecode' function in the decoder.c file, the 'imagebufferresize' function in the fromsixel.c file, and the 'sixeldecoderaw' function in the fromsixel.c file in libsixel version 1.8.1. ' function, 'imagebufferresize' function of t...

7.5CVSS7.5AI score0.01411EPSS
SaveExploits0References1
OSV
OSV
added 2018/07/15 6:29 p.m.5 views

UBUNTU-CVE-2018-14072

libsixel 1.8.1 has a memory leak in sixeldecoderdecode in decoder.c, imagebufferresize in fromsixel.c, and sixeldecoderaw in fromsixel.c...

7.5CVSS7.1AI score0.01411EPSS
SaveExploits0References3
PyPA
PyPA
added 2018/07/13 3:29 p.m.8 views

PYSEC-2018-133

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp...

8.8CVSS7.2AI score0.01688EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2018/07/13 2:29 a.m.6 views

DEBIAN-CVE-2018-14033

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Olayoutdecode in H5Olayout.c, related to HDmemcpy...

8.8CVSS9.3AI score0.01561EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/07/13 12:0 a.m.5 views

HDF5 Buffer Overflow Vulnerability (CNVD-2019-03453)

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A heap buffer overflow vulnerability exists in the 'H5Olayoutdecode' function of the H5Olayout.c file in HDF version 51.8.20,...

8.8CVSS9.3AI score0.01561EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/07/13 12:0 a.m.17 views

HDF5 Buffer Overflow Vulnerability (CNVD-2019-03454)

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A heap buffer overflow vulnerability exists in the 'H5Ofillnewdecode' of the H5Ofill.c file in HDF version 51.8.20, which can be...

8.9AI score
SaveExploits0References1
OSV
OSV
added 2018/07/10 9:29 p.m.8 views

DEBIAN-CVE-2018-13869

An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5Olinkdecode in H5Olink.c...

9.8CVSS7.1AI score0.01997EPSS
SaveExploits1References1
OSV
OSV
added 2018/07/10 9:29 p.m.7 views

UBUNTU-CVE-2018-13869

An issue was discovered in the HDF HDF5 1.8.20 library. There is a memcpy parameter overlap in the function H5Olinkdecode in H5Olink.c...

9.8CVSS6.7AI score0.01997EPSS
SaveExploits1References3
OSV
OSV
added 2018/07/10 9:29 p.m.5 views

UBUNTU-CVE-2018-13866

An issue was discovered in the HDF HDF5 1.8.20 library. There is a stack-based buffer over-read in the function H5Faddrdecodelen in H5Fint.c...

9.8CVSS7.6AI score0.01543EPSS
SaveExploits1References3
OSV
OSV
added 2018/07/10 9:29 p.m.43 views

DEBIAN-CVE-2018-13870

An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Olinkdecode in H5Olink.c...

9.8CVSS7.3AI score0.01997EPSS
SaveExploits1References1
Rows per page
Query Builder