MGASA-2022-0311 Updated net-snmp packages fix security vulnerability

A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. CVE-2022-24805 Buffer overflow and out of bounds memory access. CVE-2022-24806 A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memo...

DEBIAN-CVE-2022-37770

libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

CVE-2022-37770

libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

PT-2022-4465

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.0286 Description The issue is related to a use after free vulnerability in the get next valid entry function of the Vim text editor, which involves the use of memory after it has been freed. Exploitation of this issue...

Net-SNMP 代码问题漏洞

Net-SNMP is an open source Simple Network Management Protocol SNMP software. The software is used to monitor network devices, computer devices, UPS devices, and more. A code issue vulnerability exists in Net-SNMP that stems from a misformatted OID in GET-NEXT of nsVacmAccessTable that could resul...

PT-2022-7449 · Net Snmp +8 · Net-Snmp +8

Name of the Vulnerable Software and Affected Versions: net-snmp versions prior to 5.9.2 Description: The issue is related to a NULL pointer dereference in the nsVacmAccessTable function. A user with read-only credentials can exploit this by using a malformed OID in a GET-NEXT request to cause the...

PT-2024-11490

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereferencing issue has been identified in the Linux kernel, specifically in the smc vlan by tcpsk function. This issue arises when netdev lower get next returns NULL, whi...

PT-2021-27800

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 8 crash has been reported. The crash involves the get next owned entity and dwg write dxfb functions in the llvmfuzz.c file...

BusyBox decompress_bunzip2 integer overflow DoS

The vulnerability in the getnextblock function of the archival/libarchive/decompressbunzip2.c component of the BusyBox command-line utility set is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

tcpdump: Out of bounds read/write in in get_next_file() in tcpdump.c

An out-of-bounds write vulnerability was discovered in tcpdump while reading the file passed to the -V option of the command line program. An attacker may abuse this flaw by tricking a victim user into using a malicious file with the -V option, which would make the program read one byte before a...

PT-2020-22043

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, potentially causing a crash. The crash occurs in the asn1 get next function, which is called by x509 parse...

PT-2020-22396

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: parser get next char, parser get...

PT-2020-22409

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: asn1 get next, x509 parse ext certificate policies, and...

tcpdump Heap Buffer Overflow DoS

The vulnerability of the tcpdump.c.getnextfile function, a tool for analyzing network traffic, is related to buffer overflow vulnerabilities. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information and compromise its integrity and availability...

GNU LibreDWG Null Pointer Dereference Vulnerability (CNVD-2020-04062)

LibreDWG is a free C library for reading and writing DWG files. A null pointer dereference vulnerability exists in getnextownedentity in dwg.c in GNU LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to cause a denial of service...

ALPINE-CVE-2018-14879

The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:getnextfile...

CVE-2018-14879

The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:getnextfile...

PT-2019-3410

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 60.7.1 Description A flaw in the implementation of iCal in Thunderbird causes a heap buffer overflow in parser get next char when processing certain email messages, resulting in a potentially exploitable crash. Th...

tcpreplay heap buffer overflow vulnerability (CNVD-2018-20537)

Tcpreplay is a set of open source utilities for editing and replaying network traffic for UNIX based operating systems. A heap buffer overflow vulnerability exists in the sendpackets.c file in Tcpreplay version 4.3.0, which stems from the 'getnextpacket' function using the 'memcpy' function in an...

PT-2018-14068

Name of the Vulnerable Software and Affected Versions Tcpreplay version 4.3.0 beta1 Description The issue is related to a heap-based buffer over-read in the get next packet function, located in the send packets.c file. This function uses memcpy unsafely to copy sequences from the source buffer...