125 matches found
PT-2021-29219
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.125 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...
PT-2021-25225
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.125 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...
PT-2021-29207
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.194 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...
PT-2021-25251
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 5.10.42 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...
PT-2021-29245
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 5.10.42 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...
PT-2021-29191
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.272 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in version v4.9.272. The...
PT-2021-29183
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.272 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...
PT-2021-29199
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 4.14.235 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel versio...
PT-2021-25197
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.272 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...
PT-2021-25205
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 4.14.235 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel versio...
PT-2021-25189
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 4.4.271 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...
keystone:fuzz_asm_hex: Object-size in llvm_ks::MCInstrInfo::getName
Project: https://github.com/keystone-engine/keystone.git Detailed Report: https://oss-fuzz.com/testcase?key=5130772761673728 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmhex Job Type: libfuzzerubsankeystone Platform Id: linux Crash Type: Object-size Crash Address: Crash State:...
Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9 as used in mysqld in MySQL 5.0.x before 5.0.90 MySQL 5.1.x before 5.1.43 MySQL 5.5.x through 5.5.0-m2 and other products allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
...
Denial Of Service (DoS)
The kernel-rt package is vulnerable to Denial Of Service DoS.Missing initialization flaws were found in getname implementations in numerous network protocol implementations in the Linux kernel. Certain data structures in these getname implementations were not initialized properly before being...
wolfSSL buffer overflow vulnerability (CNVD-2019-41425)
wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A buffer overflow vulnerability exists in the DecodedCert structure of GetName in wolfcrypt/src/asn.c file in wolfSSL versions 4.1.0...
Heap overflow
In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer overflow inside the DecodedCert structure in GetName in wolfcrypt/src/asn.c because the domain name location...
CVE-2019-18840
In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer overflow inside the DecodedCert structure in GetName in wolfcrypt/src/asn.c because the domain name location...
PT-2019-15694
Name of the Vulnerable Software and Affected Versions wolfSSL versions 4.1.0 through 4.2.0c Description The issue arises from missing sanity checks of memory accesses in parsing ASN.1 certificate data during handshaking. Specifically, a one-byte heap-based buffer overflow occurs inside the...
CVE-2019-18840: Out-of-bounds Write
In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer overflow inside the DecodedCert structure in GetName in wolfcrypt/src/asn.c because the domain name location...
