Lucene search
K

3220 matches found

NVD
NVD
added 2021/04/08 6:15 p.m.8 views

CVE-2020-14104

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

8.1CVSS0.00665EPSS
Exploits0References1
Prion
Prion
added 2021/04/08 6:15 p.m.20 views

Race condition

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

6.8CVSS8AI score0.00665EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/04/08 5:44 p.m.66 views

CVE-2020-14104

CVE-2020-14104 concerns a race condition in the XQBACKUP component of the Xiaomi router AX3600 running ROM 1.0.50, causing a decompression path error. The issue is documented across multiple sources as affecting the AX3600 with ROM 1.0.50, and it originates from a race condition in XQBACKUP. The ...

8.1CVSS8AI score0.00665EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/08 5:44 p.m.15 views

CVE-2020-14104

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

8.1AI score0.00665EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/04/08 12:0 a.m.3 views

Xiaomi Xiaomi router AX3600 竞争条件问题漏洞

Xiaomi router AX3600 is a router from China-based Xiaomi. A security vulnerability exists in the Xiaomi router AX3600 ROM version 1.0.50, which originates from a decompression path error...

8.1CVSS7.7AI score0.00665EPSS
Exploits0References2
OSV
OSV
added 2021/04/01 2:15 p.m.0 views

DEBIAN-CVE-2021-20296

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5.3CVSS6.5AI score0.01747EPSS
Exploits0References1
OSV
OSV
added 2021/04/01 2:15 p.m.5 views

AZL-44505 CVE-2021-20296 affecting package OpenEXR 2.3.0-6

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5.3CVSS6.7AI score0.01747EPSS
Exploits0References1
Prion
Prion
added 2021/04/01 2:15 p.m.24 views

Null pointer dereference

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5CVSS5.2AI score0.01747EPSS
Exploits0References5Affected Software2
OSV
OSV
added 2021/04/01 2:15 p.m.0 views

UBUNTU-CVE-2021-20296

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availabili...

5.3CVSS6.7AI score0.01747EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/04/01 12:0 a.m.3 views

LIM OpenEXR 代码问题漏洞

OpenEXR is an open-standard, high dynamic range image format that is widely used in computer graphics to store image data, but can also store some data needed for post-synthesis processing. A null pointer dereference vulnerability exists in the Dwa decompression function of the IlmImf library in...

5.3CVSS7.7AI score0.01747EPSS
Exploits0References14
CVE
CVE
added 2021/04/01 12:0 a.m.226 views

CVE-2021-20296

OpenEXR (IlmImf) before 3.0.0-beta is affected by CVE-2021-20296 due to a crafted input file in the Dwa decompression path that can trigger a NULL pointer dereference, primarily impacting availability. Affected versions are OpenEXR prior to 3.0.0-beta; exploitation would involve processing a mali...

5.3CVSS5.2AI score0.01747EPSS
Exploits0References5Affected Software1
Microsoft CVE
Microsoft CVE
added 2021/03/26 7:0 a.m.2 views

decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer with a resultant invalid free or segmentation fault via malformed gzip data.

...

7.5CVSS7AI score0.02795EPSS
Exploits0
NVD
NVD
added 2021/03/25 7:15 p.m.17 views

CVE-2021-20216

A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability...

7.8CVSS0.02276EPSS
Exploits0References4
OSV
OSV
added 2021/03/25 7:15 p.m.1 views

ALPINE-CVE-2021-20216

A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS6.4AI score0.02276EPSS
Exploits0References1
OSV
OSV
added 2021/03/25 7:15 p.m.0 views

DEBIAN-CVE-2021-20216

A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability...

7.5CVSS7.1AI score0.02276EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/03/25 6:57 p.m.20 views

CVE-2021-20216

A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability...

7.4AI score0.02276EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.1 views

Vulnerability of the jbig2_huffman_get function in the libjbig2dec.a decompression library for JBIG2 image compression format. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the jbig2huffmanget function in the libjbig2dec.a decompression library for JBIG2 image compression formats is related to an improper pointer dereferencing. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

6.5CVSS6.5AI score0.03452EPSS
Exploits1References8Affected Software3
OpenVAS
OpenVAS
added 2021/03/20 12:0 a.m.21 views

Fedora: Security Advisory for upx (FEDORA-2021-acfb7be76e)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.3CVSS6.7AI score0.00751EPSS
Exploits1References2
Fedora
Fedora
added 2021/03/19 8:32 p.m.54 views

[SECURITY] Fedora 34 Update: upx-3.96-8.fc34

UPX is a free, portable, extendable, high-performance executable packer for several different executable formats. It achieves an excellent compression ratio and offers very fast decompression. Your executables suffer no memory overhead or other drawbacks...

8.3CVSS4.8AI score0.00751EPSS
Exploits1
Fedora
Fedora
added 2021/03/19 8:25 p.m.23 views

[SECURITY] Fedora 34 Update: suricata-6.0.2-1.fc34

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

0.2AI score
Exploits0
Rows per page
Query Builder