23 matches found
EUVD-2020-14820
Malware in sbrugna...
Unity Linux 20.1070e Security Update: ffmpeg (UTSA-2025-936088)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936088 advisory. A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avdictset function in dict.c. Tenable has extracted the preceding description bloc...
Linux Distros Unpatched Vulnerability : CVE-2020-7105
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked. CVE-2020-7105 Note tha...
SUSE CVE-2017-9049
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398...
Denial Of Service (DoS)
ffmpeg is vulnerable to denial of service. The vulnerability exists due to a memory leak in the avdictset function in dict.c...
DEBIAN-CVE-2020-22054
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avdictset function in dict.c...
UBUNTU-CVE-2020-22054
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avdictset function in dict.c...
CVE-2020-22054
CVE-2020-22054 is a Denial of Service vulnerability in FFmpeg 4.2 caused by a memory leak in av_dict_set in dict.c. The issue is consistently reported across multiple advisories (Debian, Debian LTS, openSUSE/openSUSE-SU, SUSE, Ubuntu) tied to FFmpeg 4.2. Exploitation details are not provided in t...
FFmpeg 安全漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg due to a memory leak in the av dictionary set function in dict.c. An attacker could use this vulnerability to conduct a denial-of-service attack. The vulnerability can ...
Updated hiredis packages fix security vulnerability
Updated hiredis packages fix security vulnerability: async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked CVE-2020-7105...
Fedora 30 : hiredis (2020-f6cc7883b8)
Fix for CVE-2020-7105 hiredis: NULL pointer dereference in async.c and dict.c Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...
Denial Of Service (DoS)
hiredis is vulnerable to denial of service DoS. The vulnerability exists due to multiple NULL pointer derefence issues in async.c and dict.c in libhiredis.a...
Denial Of Service (DoS)
libhiredis.so is vulnerable to denial of service DoS. The attack is possible due to the failure of checking malloc return values in async.c and dict.c, causing a NULL pointer dereference...
CVE-2020-7105
async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked...
Null pointer dereference
async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked...
CVE-2020-7105
CVE-2020-7105 concerns the hiredis C client. Concrete details across connected docs show the vulnerability in the library: async.c and dict.c within libhiredis.a (hiredis up to 0.14.0) allow a NULL pointer dereference due to unchecked malloc return values. Impact described as potential crash/deni...
CVE-2020-7105
async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked...
NewStart CGSL CORE 5.04 / MAIN 5.04 : glusterfs Vulnerability (NS-SA-2019-0064)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has glusterfs packages installed that are affected by a vulnerability: - A flaw was found in dict.c:dictunserialize function of glusterfs, dicunserialize function does not handle negative key length values. An attacker could us...
libxml2 heap buffer overflow out-of-bounds read vulnerability (CNVD-2017-07325 )
libxml2 is the GNOME project team developed a C-based library for parsing XML documents, which supports multiple encoding formats, Xpath parsing, Well-formed and valid validation. A heap buffer overflow out-of-bounds read vulnerability exists in the 'xmlDictAddString' function of the dict.c file ...
CVE-2017-9049
CVE-2017-9049 affects libxml2 prior to a fix released after 2.9.4. It describes a heap-based buffer over-read in xmlDictComputeFastKey within dict.c, which can cause programs using libxml2 (e.g., PHP) to crash. The vulnerability arises from an incomplete fix (Bug 759398). Public references show t...