The vulnerability of the LibRaw::identify_process_dng_fields function in the identify.cpp component of the LibRaw image processing library, related to writing beyond buffer boundaries, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the LibRaw::identifyprocessdngfields function in the identify.cpp component of the LibRaw image processing library is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its...

The vulnerability in the imap/util.c component of the Mutt and NeoMutt email clients arises from reading data beyond the allowed buffer size. This allows an attacker to access confidential data and also cause service interruptions.

The vulnerability in the imap/util.c component of the Mutt and NeoMutt email clients is related to incorrect handling of the IMAP sequence set, which ends with a semicolon. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service failures...

The vulnerability of the WAF engine for Apache ModSecurity, related to deficiencies in handling exceptional states, allows a attacker to trigger a service failure.

The vulnerability of the WAF engine for Apache ModSecurity is related to incorrect data processing in the form of key-value pairs. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of the Open vSwitch network service provided by Neutron, related to insufficient data authentication checks, allows attackers to access confidential data and cause service failures.

The vulnerability of the Open vSwitch network service provided by Neutron relates to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures through specially crafted packets...

The vulnerability of the GdkPixbuf image loading library, related to writing beyond the buffer’s boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GdkPixbuf image loading library is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through the use of a specially create...

The vulnerability of the sshd-core Java library component, which supports the SSH protocol of Apache SSHD, allows a attacker to cause a service failure.

The vulnerability of the sshd-core Java library component, which supports SSH protocol with Apache SSHD, is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...

The vulnerability of Juniper Networks Junos OS routers of the QFX5000 and EX4600 series, related to unlimited resource distribution, allows a hacker to cause service interruptions.

The vulnerability of Juniper Networks Junos OS routers of the QFX5000 and EX4600 series lies in their unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability in the implementation of the ICMP checksum protocol for TCP/IP implementations like NicheLite and InterNiche allows a attacker to cause a service failure.

The vulnerability of the ICMP checksum implementation in TCP/IP implementations like NicheLite and InterNiche is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of TCP/IP NicheLite and InterNiche, related to improper handling of exceptional states, allows attackers to trigger a service failure.

The vulnerability of TCP/IP NicheLite and InterNiche relates to improper handling of exceptional states during HTTP requests processing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of DNS-client TCP/IP clients of NicheLite and InterNiche allows a hacker to induce a service failure.

The vulnerability of TCP/IP client applications of NicheLite and InterNiche lies in errors during the processing of input data length parameters. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Apache Commons Compress library lies in the execution of a loop without sufficient limitation on the number of iterations it can perform. This allows attackers to trigger a service failure.

The vulnerability of the Apache Commons Compress library lies in the execution of a loop without sufficient restrictions on its iteration count. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions by creating specially crafted 7Z format files...

Siemens SIMATIC 安全特征问题漏洞

The LOGO! CMR family is a communication system for monitoring and controlling distributed devices and systems via text messages or e-mail.Siemens SIMATIC RTU3000C is a compact RTU from Siemens, Germany is a low-power remote terminal unit RTU for energy self-sufficiency. A vulnerability in the...

CVE-2021-33011

CVE-2021-33011 affects TOYOPUC product families (PC10, Plus, PC3J/PC2J, Nano) where ICMP flooding may prevent normal Ethernet communication, due to an allocation of resources without limits or throttling (CWE-770). RedHat, NVD, CNNVD and related advisories detail vulnerable components and listed ...

The vulnerability of the “diagnose system geoip-city” command in the CLI interface of the Fortinet FortiManager device management software, as well as the Fortinet FortiAnalyzer event monitoring and analysis tool, allows a malicious actor to trigger a service failure.

The vulnerability of the “diagnose system geoip-city” command in the CLI Command Line Interface of the Fortinet FortiManager device management software, as well as the Fortinet FortiAnalyzer event monitoring and analysis tool, is related to an operation that occurs outside of the buffer in memory...

DEBIAN-CVE-2021-3761

Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network for example AS 13335 - Cloudflare prior to launching a BGP hijack which...

UBUNTU-CVE-2021-3761

Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network for example AS 13335 - Cloudflare prior to launching a BGP hijack which...

ROS-2-499

2.499 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...

Cisco IOS XR 代码问题漏洞

Cisco IOS XR Software is a set of operating systems developed by Cisco for its network devices.Cisco IOS XR Software DHCP denial of service vulnerability can be exploited to trigger a crash of the dhcpd process, resulting in a denial of service...

ROS-2-448

2.448 Vulnerability in OpenVPN CVE-2020-11810 1. Vulnerability Description: A corrective release of the OpenVPN Virtual Private Networking Package 2.4.9 has been generated. The new version addresses a vulnerability CVE-2020-11810 that allows a client session to be transferred to a new IP address...

CVE-2021-34144

The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C BT SDK through 0.9.1 does not properly handle the reception of truncated LMPSCOLinkRequest packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections disabling the AB5301A inqui...