13885 matches found
Design/Logic Flaw
fig2dev 3.2.7b contains a segmentation fault in the gencgmstart function in gencgm.c...
UBUNTU-CVE-2020-21530
fig2dev 3.2.7b contains a segmentation fault in the readobjects function in read.c...
UBUNTU-CVE-2020-21535
fig2dev 3.2.7b contains a segmentation fault in the gencgmstart function in gencgm.c...
CVE-2020-21535
fig2dev 3.2.7b contains a segmentation fault in the gencgmstart function in gencgm.c...
CVE-2020-21535
CVE-2020-21535 affects fig2dev 3.2.7b (Xfig/Transfig) with a segmentation fault in gencgm_start (gencgm.c). OpenSUSE/SUSE advisories indicate this is fixed in fig2dev 3.2.8 Patchlevel 8b; update to that version to remediate. Other linked sources list the vulnerability among multiple CVEs in the s...
CVE-2020-21535
fig2dev 3.2.7b contains a segmentation fault in the gencgmstart function in gencgm.c...
CVE-2020-21530
CVE-2020-21530 affects fig2dev 3.2.7b, where a segmentation fault occurs in read.c::read_objects. The vulnerability is shown across multiple Linux distributions (Red Hat, Ubuntu, openSUSE/SUSE) as an unpatched issue; remediation is to upgrade to fig2dev 3.2.8 (Patchlevel 8b) or apply the vendor p...
CVE-2020-21530
fig2dev 3.2.7b contains a segmentation fault in the readobjects function in read.c...
CVE-2020-21530
fig2dev 3.2.7b contains a segmentation fault in the readobjects function in read.c...
CVE-2020-21605
libde265 v1.0.4 contains a segmentation fault in the applysaointernal function, which can be exploited via a crafted a file...
CVE-2020-21605
CVE-2020-21605 affects libde265 v1.0.4, where a segmentation fault in the apply_sao_internal function can be triggered by processing a crafted file, potentially enabling a denial-of-service. Connected advisories corroborate the issue and point to multiple distributions addressing it by upgrading ...
fig2dev å®å Øę¼ę“
fig2dev is used to convert .fig files to various graphics languages and formats. A segmentation error vulnerability exists in the readobjects function in read.c in fig2dev version 3.2.7b. No details of the vulnerability are currently available...
Xfig fig2dev ē¼å²åŗéčÆÆę¼ę“
fig2dev is used to convert .fig files to various graphics languages and formats. A segmentation error vulnerability exists in the gencgmstart function in gencgm.c in fig2dev version 3.2.7b. No detailed vulnerability details are currently available...
Libde265 代ē é®é¢ę¼ę“
libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a segmentation error vulnerability in the applysaointernal function. An attacker can exploit the vulnerability via specially crafted files to cause a denial of service...
CVE-2020-21605
libde265 v1.0.4 contains a segmentation fault in the applysaointernal function, which can be exploited via a crafted a file...
PT-2021-8177 Ā· LinuxĀ +3 Ā· Linux KernelĀ +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the clk component of the Linux kernel, where unbinding a CCU driver unmaps the device's MMIO region but leaves its clocks/resets and their providers registered...
None in vim/vim
āļø Description Team, trust you are doing well. As part of continues fuzzing VIM v8.2.3425 in persistence mode, I found a heap use-after-free nvreplace. šµļøāāļø Proof of Concept Affected version: VIM v8.2.3425 Tested on: Linux s157903 4.15.0-106-generic 107-Ubuntu SMP Thu Jun 4 11:27:52 UTC 2020 x8664...
CVE-2021-39260
A crafted NTFS image can cause an out-of-bounds access in ntfsinodesyncstandardinformation in NTFS-3G 2021.8.22...
OESA-2021-1331 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: arch/x86/kvm/mmu/pagingtmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault.CVE-2021-38198...
Solarwinds Orion Platform Cross-Site Scripting Vulnerability (CNVD-2021-69606)
Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. Solarwinds Orion Platform is a cross-site scripting vulnerability that can be exploited by attackers to store XSS via text box hyperlinks...