openvswitch: use-after-free in decode_NXAST_RAW_ENCAP during the decoding of a RAW_ENCAP action

Open vSwitch aka openvswitch has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

openvswitch: use-after-free in decode_NXAST_RAW_ENCAP during the decoding of a RAW_ENCAP action

Open vSwitch aka openvswitch has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

libwebp: heap-based buffer overflow in WebPDecode*Into functions

A flaw was found in libwebp. A heap-based buffer overflow in functions WebPDecodeInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

SUSE: Security Advisory (SUSE-SU-2014:1631-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2013:1166-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:0862-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

open62541:fuzz_json_decode_encode: Heap-buffer-overflow in jumpOverRec

Detailed Report: https://oss-fuzz.com/testcase?key=4963278934638592 Project: open62541 Fuzzing Engine: honggfuzz Fuzz Target: fuzzjsondecodeencode Job Type: honggfuzzasanopen62541 Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x628000003f80 Crash State: jumpOverRec...

PT-2021-25149

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 4.14.234 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25165

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.271 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25177

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 4.4.270 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25108

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.124 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29159

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.271 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29126

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29102

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 5.4.123 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29143

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 4.14.234 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25031

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 5.12.8 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25075

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 5.10.41 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29025

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 5.12.8 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29069

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 5.10.41 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29171

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 4.4.270 Description The issue is related to an incorrect limit in the filelayout decode layout function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...