CVE-2020-22054

CVE-2020-22054 is a Denial of Service vulnerability in FFmpeg 4.2 caused by a memory leak in av_dict_set in dict.c. The issue is consistently reported across multiple advisories (Debian, Debian LTS, openSUSE/openSUSE-SU, SUSE, Ubuntu) tied to FFmpeg 4.2. Exploitation details are not provided in t...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg due to a memory leak in the av dictionary set function in dict.c. An attacker could use this vulnerability to conduct a denial-of-service attack. The vulnerability can ...

Updated hiredis packages fix security vulnerability

Updated hiredis packages fix security vulnerability: async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked CVE-2020-7105...

Fedora 30 : hiredis (2020-f6cc7883b8)

Fix for CVE-2020-7105 hiredis: NULL pointer dereference in async.c and dict.c Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Denial Of Service (DoS)

hiredis is vulnerable to denial of service DoS. The vulnerability exists due to multiple NULL pointer derefence issues in async.c and dict.c in libhiredis.a...

Denial Of Service (DoS)

libhiredis.so is vulnerable to denial of service DoS. The attack is possible due to the failure of checking malloc return values in async.c and dict.c, causing a NULL pointer dereference...

CVE-2020-7105

async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked...

Null pointer dereference

async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked...

CVE-2020-7105

async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked...

CVE-2020-7105

CVE-2020-7105 concerns the hiredis C client. Concrete details across connected docs show the vulnerability in the library: async.c and dict.c within libhiredis.a (hiredis up to 0.14.0) allow a NULL pointer dereference due to unchecked malloc return values. Impact described as potential crash/deni...

NewStart CGSL CORE 5.04 / MAIN 5.04 : glusterfs Vulnerability (NS-SA-2019-0064)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has glusterfs packages installed that are affected by a vulnerability: - A flaw was found in dict.c:dictunserialize function of glusterfs, dicunserialize function does not handle negative key length values. An attacker could us...

The vulnerability of the xmlDictComputeFastKey function (dict.c) in the libxml2 library allows a attacker to cause a service failure.

The vulnerability of the xmlDictComputeFastKey function in the dict.c file of the libxml2 library arises from a read operation that occurs outside the buffer, within dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

libxml2 heap buffer overflow out-of-bounds read vulnerability (CNVD-2017-07325 )

libxml2 is the GNOME project team developed a C-based library for parsing XML documents, which supports multiple encoding formats, Xpath parsing, Well-formed and valid validation. A heap buffer overflow out-of-bounds read vulnerability exists in the 'xmlDictAddString' function of the dict.c file ...

CVE-2017-9049

CVE-2017-9049 affects libxml2 prior to a fix released after 2.9.4. It describes a heap-based buffer over-read in xmlDictComputeFastKey within dict.c, which can cause programs using libxml2 (e.g., PHP) to crash. The vulnerability arises from an incomplete fix (Bug 759398). Public references show t...

CVE-2017-9049

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398...

Heap-based Buffer Overflow Through Embedded C Dependency

nokogiri has a copied version of the libxml2 library. The copy that nokogiri includes is vulnerable to heap-based buffer overflow due to an incomplete fix for CVE-2016-1839. The buffer overflow is caused due to a flaw in the xmlDictAddString function in dict.c. This vulnerability in libxml2 is...

PT-2017-3260

Name of the Vulnerable Software and Affected Versions libxml2 version 20904-GITv2.9.4-16-g0741801 Description The issue is caused by a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This can cause programs that use libxml2, such as PHP, to crash. The problem exists d...