Design/Logic Flaw

Lua through 5.4.0 has a segmentation fault in changedline in ldebug.c e.g., when called by luaGtraceexec because it incorrectly expects that an oldpc value is always updated upon a return of the flow of control to a function...

CVE-2020-15945

Lua 5.4.0 fixed in 5.4.1 has a segmentation fault in changedline in ldebug.c e.g., when called by luaGtraceexec because it incorrectly expects that an oldpc value is always updated upon a return of the flow of control to a function...

keycloak: security issue on reset credential flow

A flaw was found in the reset credential flow in Keycloak. This flaw allows an attacker to gain unauthorized access to the application...

PT-2020-22626

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state indicates the involvement of function...

PT-2020-21648

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the ndpi search amazon video, check ndpi tcp flow func, and ndpi detection proces...

PT-2020-21716

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions ndpi search h323, check ndpi tcp flow func, and ndpi detection...

PT-2020-22652

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, associated with a crash type. The crash state involves functions such as ndpi search irc tcp, check ndpi t...

PT-2020-22661

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the functions ndpi search oscar, check ndpi tcp flow func, and ndpi detection...

PT-2020-22630

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions ndpi search h323, check ndpi udp flow func, and ndpi detection...

PT-2020-21715

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, potentially causing a crash. The crash involves the ndpi search oscar tcp connect, check ndpi tcp flow fun...

PT-2020-21704

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the ndpi int check stun, ndpi search stun, and check...

PT-2020-21753

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the ndpi int check stun, ndpi search stun, and check...

PT-2020-21649

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 13 crash has been reported. The crash involves the functions ndpi search memcached, check ndpi udp flow func, and ndpi detectio...

PT-2020-21757

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the functions ndpi search mail smtp tcp, check ndpi tcp flow func, and ndpi...

GReAT thoughts: Awesome IDA Pro plugins

The Global Research & Analysis Team here at Kaspersky has a tradition of meeting up once a month and sharing cutting-edge research, interesting techniques and useful tools. We recently took the unprecedented decision to make our internal meetings public for a few months and present them as a seri...

PT-2020-22548

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions ndpi search setup iax, ndpi search iax, and check ndpi udp flow fun...

PT-2020-22531

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the ndpi search kerberos function, and the call stack includes check ndpi udp flo...

PT-2020-22559

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: ndpi netbios name interpret, ndpi int netbios add...

PT-2020-22604

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: tun key to attr, odp flow key fro...

Design/Logic Flaw

During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perform electromagnetic-based side channel attacks to record traces leading to the recovery of the secr...