Lucene search
K

3202 matches found

Veracode
Veracode
added 2021/04/09 5:6 a.m.36 views

Denial Of Service (DoS)

github.com/containers/storage/commit is vulnerable to Denial Of Service DoS. The decompression functionality allows an attacker to crash the application by pulling in malicious tools that resembles podman or cri-o during container image pulls...

6.5CVSS6.5AI score0.01587EPSS
Exploits1References10Affected Software6
OSV
OSV
added 2021/04/08 6:15 p.m.2 views

CVE-2020-14104

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

8.1CVSS5.8AI score0.00665EPSS
Exploits0References1
NVD
NVD
added 2021/04/08 6:15 p.m.8 views

CVE-2020-14104

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

8.1CVSS0.00665EPSS
Exploits0References1
Prion
Prion
added 2021/04/08 6:15 p.m.20 views

Race condition

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

6.8CVSS8AI score0.00665EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/04/08 5:44 p.m.66 views

CVE-2020-14104

CVE-2020-14104 concerns a race condition in the XQBACKUP component of the Xiaomi router AX3600 running ROM 1.0.50, causing a decompression path error. The issue is documented across multiple sources as affecting the AX3600 with ROM 1.0.50, and it originates from a race condition in XQBACKUP. The ...

8.1CVSS8AI score0.00665EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/08 5:44 p.m.15 views

CVE-2020-14104

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

8.1AI score0.00665EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/04/08 12:0 a.m.3 views

Xiaomi Xiaomi router AX3600 竞争条件问题漏洞

Xiaomi router AX3600 is a router from China-based Xiaomi. A security vulnerability exists in the Xiaomi router AX3600 ROM version 1.0.50, which originates from a decompression path error...

8.1CVSS7.7AI score0.00665EPSS
Exploits0References2
OSV
OSV
added 2021/04/01 2:15 p.m.4 views

AZL-44505 CVE-2021-20296 affecting package OpenEXR 2.3.0-6

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5.3CVSS6.7AI score0.01747EPSS
Exploits0References1
OSV
OSV
added 2021/04/01 2:15 p.m.0 views

DEBIAN-CVE-2021-20296

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5.3CVSS6.5AI score0.01747EPSS
Exploits0References1
Prion
Prion
added 2021/04/01 2:15 p.m.24 views

Null pointer dereference

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5CVSS5.2AI score0.01747EPSS
Exploits0References5Affected Software2
OSV
OSV
added 2021/04/01 2:15 p.m.0 views

UBUNTU-CVE-2021-20296

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5.3CVSS6.7AI score0.01747EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/04/01 12:0 a.m.3 views

LIM OpenEXR 代码问题漏洞

OpenEXR is an open-standard, high dynamic range image format that is widely used in computer graphics to store image data, but can also store some data needed for post-synthesis processing. A null pointer dereference vulnerability exists in the Dwa decompression function of the IlmImf library in...

5.3CVSS7.7AI score0.01747EPSS
Exploits0References14
CVE
CVE
added 2021/04/01 12:0 a.m.226 views

CVE-2021-20296

OpenEXR (IlmImf) before 3.0.0-beta is affected by CVE-2021-20296 due to a crafted input file in the Dwa decompression path that can trigger a NULL pointer dereference, primarily impacting availability. Affected versions are OpenEXR prior to 3.0.0-beta; exploitation would involve processing a mali...

5.3CVSS5.2AI score0.01747EPSS
Exploits0References5Affected Software1
Microsoft CVE
Microsoft CVE
added 2021/03/26 7:0 a.m.2 views

decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer with a resultant invalid free or segmentation fault via malformed gzip data.

...

7.5CVSS7AI score0.02795EPSS
Exploits0
NVD
NVD
added 2021/03/25 7:15 p.m.17 views

CVE-2021-20216

A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability...

7.8CVSS0.02276EPSS
Exploits0References4
OSV
OSV
added 2021/03/25 7:15 p.m.1 views

ALPINE-CVE-2021-20216

A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS6.4AI score0.02276EPSS
Exploits0References1
OSV
OSV
added 2021/03/25 7:15 p.m.0 views

DEBIAN-CVE-2021-20216

A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS7.1AI score0.02276EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/03/25 6:57 p.m.20 views

CVE-2021-20216

A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability...

7.4AI score0.02276EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.1 views

Vulnerability of the jbig2_huffman_get function in the libjbig2dec.a decompression library for JBIG2 image compression format. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the jbig2huffmanget function in the libjbig2dec.a decompression library for JBIG2 image compression formats is related to an improper pointer dereferencing. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

6.5CVSS6.5AI score0.03452EPSS
Exploits1References8Affected Software3
OpenVAS
OpenVAS
added 2021/03/20 12:0 a.m.21 views

Fedora: Security Advisory for upx (FEDORA-2021-acfb7be76e)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.3CVSS6.7AI score0.00751EPSS
Exploits1References2
Rows per page
Query Builder