PT-2019-19350

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description A problem has been discovered in the Binary File Descriptor BFD library, also known as libbfd, as distributed in GNU Binutils. The issue is an attempted excessive memory allocation in the setup group...

CVE-2019-9073

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in bfdelfslurpversiontables in elf.c...

CVE-2019-9076: Allocation of Resources Without Limits or Throttling

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elfreadnotes in elf.c...

PT-2019-6399

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is related to the bfd elf slurp version tables function in the elf.c component of the GNU Binutils, which is associated with unlimited memory allocation. This allows a remote attacker to cause a...

PT-2019-5659

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32 Description The issue is related to the libbfd library, specifically the elf read notes function in elf.c, and is associated with unbounded resource allocation. Exploitation of this issue may allow an attacker to caus...

Bento4 Excessive Memory Allocation Attempt Vulnerability (CNVD-2019-28481)

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. An excessive memory allocation attempt vulnerability exists in AP4Array::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627, which can be exploited to cause an out-of-memory condition via specially crafted MP4 input...

Memory corruption

An issue was discovered in AP4Array::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls, a related issue to CVE-2018-20095...

Memory corruption

wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory allocation, as demonstrated by wasm-merge and wasm-opt...

CVE-2019-7698

An issue was discovered in AP4Array::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls, a related issue to CVE-2018-20095...

CVE-2019-7704

wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory allocation, as demonstrated by wasm-merge and wasm-opt...

PT-2019-18708

Name of the Vulnerable Software and Affected Versions Bento4 version 1.5.1-627 Description An issue was discovered in the AP4 Array function, which can be triggered by crafted MP4 input, leading to an attempt at excessive memory allocation. This issue is related to a previously known problem...

PT-2019-18714

Name of the Vulnerable Software and Affected Versions Binaryen version 1.38.22 Description The issue is related to excessive memory allocation in the wasm::WasmBinaryBuilder::readUserSection function in wasm-binary.cpp. This can be triggered by tools such as wasm-merge and wasm-opt. Recommendatio...

CVE-2019-7704: Allocation of Resources Without Limits or Throttling

wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory allocation, as demonstrated by wasm-merge and wasm-opt...

The vulnerability of the ALD service in the Astra Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ALD service in the Astra Linux operating system is related to an error that causes excessive network traffic generation. Exploiting this vulnerability allows a malicious actor to cause a failure in the slapd service or the entire system...

CVE-2019-6590

On BIG-IP LTM 13.0.0 to 13.0.1 and 12.1.0 to 12.1.3.6, under certain conditions, the TMM may consume excessive resources when processing SSL Session ID Persistence traffic...

PT-2019-18172

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM versions 12.1.0 through 12.1.3.6 F5 BIG-IP LTM versions 13.0.0 through 13.0.1 Description The issue arises under certain conditions when the Traffic Management Microkernel TMM processes SSL Session ID Persistence traffic, leading...

CVE-2019-6988

An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service attempted excessive memory allocation in opjcalloc in openjp2/opjmalloc.c, when called from opjtcdinittile in openjp2/tcd.c, as demonstrated by the 64-bit opjdecompress...

CVE-2019-7148

An attempted excessive memory allocation was discovered in the function readlongnames in elfbegin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers...

CVE-2019-6966

An issue was discovered in Bento4 1.5.1-628. The AP4ElstAtom class in Core/Ap4ElstAtom.cpp has an attempted excessive memory allocation related to AP4Array::EnsureCapacity in Core/Ap4Array.h, as demonstrated by mp42hls...

CVE-2019-6966

An issue was discovered in Bento4 1.5.1-628. The AP4ElstAtom class in Core/Ap4ElstAtom.cpp has an attempted excessive memory allocation related to AP4Array::EnsureCapacity in Core/Ap4Array.h, as demonstrated by mp42hls...