Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to the generic pointer 'p' pointing to an inaccessible address in the getle64 function. Remediation Upgrade upx to version 4.2.1 or higher. References - GitHub Commit - GitHub Issue Credit: 14isnot40...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to the generic pointer 'p' points to an inaccessible address in the getle32 function. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5349. Remediation Upgrade upx to version...

CVE-2023-27055

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...

Design/Logic Flaw

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...

DEBIAN-CVE-2021-43315

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5349...

UBUNTU-CVE-2021-43316

A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle64...

UBUNTU-CVE-2021-43315

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5349...

PT-2023-12433 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow issue was found in the get le64 function, where a generic pointer 'p' points to an inaccessible address. Recommendations: At the moment, there is no information abo...

CVE-2023-27055

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...

PT-2023-6802

Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0.1531 Description The issue is related to a NULL Pointer Dereference in the get register function, which can be exploited to gain access to confidential data, compromise data integrity, and cause a denial of service. T...

PT-2023-17763 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version Android-13 Description: In the getAvailabilityStatus function of EnableContentCapturePreferenceController.java, there is a possible way to bypass DISALLOW CONTENT CAPTURE due to a permissions bypass. This could lead to local...

AVer Information PTZApp 路径遍历漏洞

AVer Information PTZApp is an innovative freeware with an upgrade interface from AVer Information China. It is used to control AVer USB cameras. A security vulnerability exists in AVer Information PTZApp version v20.01044.48. An attacker has exploited the vulnerability to access sensitive files v...

CVE-2023-27055

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX that stems from a generic pointer p pointing to an inaccessible address in func getle64...

PT-2023-12434 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow was discovered in the upx software. The issue arises when the generic pointer 'p' points to an inaccessible address in the get le32 function. This problem is...

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX, which stems from an issue in the function PackLinuxElf32::elflookup in plxelf.cpp:5382 that causes the generic pointer p to point to an inaccessible address in func getle32...

PT-2023-17842 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to an incorrect bounds check in the dwc3 exynos clk get function of dwc3-exynos.c, which could lead to a possible out of bounds write. This may result in local escalation of privilege in the...

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX, which stems from an issue in function PackLinuxElf32::elflookup in plxelf.cpp:5349 that causes the generic pointer p to point to an inaccessible address in func getle32...

DEBIAN-CVE-2023-1513

A flaw was found in KVM. When calling the KVMGETDEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvmdebugregs structure that could be copied to userspace, causing an information leak...

CVE-2023-1592

A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file admin/courses/viewclass.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...