9394 matches found
Mellanox network card driver Heap Buffer Overflow DoS
The vulnerability of the mlxswspacltcaminit function in the drivers/net/ethernet/mellanox/mlxsw/spectrumacltcam.c file of the Mellanox network card driver for the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system...
SWFTools Denial of Service Vulnerability (CNVD-2024-37468)
SWFTools is a set of utilities for working with Adobe Flash files SWF files. A denial of service vulnerability exists in SWFTools version v0.9.2, which stems from an overlapping strcpy parameter in component /home/swftools/src/swfc+0x448318a. An attacker can exploit this vulnerability to cause a...
USN-6684-1 ncurses vulnerability
It was discovered that ncurses incorrectly handled certain function return values, possibly leading to segmentation fault. A local attacker could possibly use this to cause a denial of service system crash...
Linux regmapdebugfs_exit() Disclosure
The vulnerability of the regmapdebugfsexit function in Linux operating systems is related to memory release errors. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause service failures...
BIT-AIRFLOW-2023-22888 Apache Airflow: Scheduler remote DoS
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the runid parameter. This vulnerability is considered low since it requires an authenticated user to exploit it. It is recommended to upgrade to a version th...
D-Link DIR-823G Router DoS
The vulnerability of the sub4110f4 function in D-Link DIR-823G router microprogramming software is related to errors in pointer manipulation when processing URL addresses containing extensions .html, .asp, .php, or .Login. Exploiting this vulnerability can allow an attacker to cause service...
mysql: Server: Partition unspecified vulnerability (CPU Apr 2023)
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Partition. Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
UBUNTU-CVE-2024-25269
libheif = 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a denial of service attack...
edk2: Buffer overflow in the DHCPv6 client via a long Server ID option
A security flaw was identified in EDK2, the open-source reference implementation of the UEFI specification, involving a buffer overflow vulnerability. This particular weakness enables an unauthorized attacker within the vicinity of the network to transmit a specifically crafted DHCPv6 message...
edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message
A security weakness was identified in EDK2, the open-source reference implementation of the UEFI specification, revealing a buffer overflow vulnerability. This vulnerability enables an unauthorized attacker within proximity on the network to transmit a specifically crafted DHCPv6 Advertise messag...
D-Link DIR-823G Router Sub_41D354 Function Code Execution
The vulnerability of the sub41D354 function in D-Link DIR-823G router’s microprogramming system is related to the issue where the operation’s output escapes the buffer in memory when processing the soapaction parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
Linux ima Heap Buffer Overflow DoS
The vulnerability of the memblockfreelate function in the ima component of the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
KVM Heap Buffer Overflow DoS
The vulnerability of the kvmforeachvcpu function in the KVM virtualization subsystem of Linux operating systems is related to errors in pointer manipulation when processing the createdvcpus parameter. Exploiting this vulnerability can allow a remote attacker to trigger a service failure...
Linux networking Heap Buffer Overflow DoS
The vulnerability of the network component of the Linux operating system’s kernel is related to incorrect synchronization when increasing counters in the functions brhandleframefinish and deliverclone in the net/bridge/brforward.c module. Exploiting this vulnerability can allow a remote attacker ...
PT-2024-12410 · Qualcomm · 315 5G Iot Modem Firmware +107
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while processing a PDU Release command with a PDU ID parameter that is out of rang...
FreeIPA run() Script Privilege Escalation
The vulnerability of the run function in the ipautil.py script of the FreeIPA server is related to insufficient validation of input data during session establishment when processing the user parameter /sip/session/loginpassword. Exploiting this vulnerability can allow a malicious actor to gain...
Microsoft .NET Pointer Swapping DoS
The vulnerability of the Microsoft .NET software platform is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Debian GNU/Linux Kerberos Memory Release DoS
The vulnerability in the /krb5/src/kdc/ndr.c component of the Kerberos network protocol implementation in the Debian GNU/Linux operating system is related to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Rack Regular Expression DoS
The vulnerability of the Ruby interpreter’s Rack module is related to the incorrect handling of invalid URL addresses. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2023-48674
Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the system could potentially send malicious data to the device in order to cause some services to cease to function...