662 matches found
DEBIAN-CVE-2023-28320
A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...
AZL-26790 CVE-2023-28320 affecting package cmake for versions less than 3.21.4-11
A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...
CVE-2023-28320
A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...
CVE-2023-28320
A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...
SUSE CVE-2023-28320
A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doi...
siglongjmp race condition
libcurl provides several different backends for resolving hostnames, selected at build time. If it is built to use the synchronous resolver, it allows name resolves to time-out slow operations using alarm and siglongjmp. When doing this, libcurl used a global buffer that was not mutex protected a...
CVE-2023-31979
Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c...
DEBIAN-CVE-2023-31979
Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c...
UBUNTU-CVE-2023-31979
Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c...
CVE-2023-31979
Catdoc v0.95 was discovered to contain a global buffer overflow via the function processfile at /src/reader.c...
OSV-2023-284 Global-buffer-overflow in dwg_codepage_dxfstr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57723 Crash type: Global-buffer-overflow READ 8 Crash state: dwgcodepagedxfstr dxfheaderwrite dwgwritedxf...
PT-2023-35758 · Git +1 · Libredwg
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 8. The crash state involves several functions: dwg codepage dxfstr, dxf...
PT-2023-35742 · Git +1 · Kimageformats
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves functions such as read coding unit, read codin...
PT-2023-35738 · Git +1 · Libxml2
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a global buffer overflow read. The crash state involves functions such as xmlStrndup, htmlParseSystemLiteral, a...
OSV-2023-215 Global-buffer-overflow in htmlParsePI
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57304 Crash type: Global-buffer-overflow READ 1 Crash state: htmlParsePI htmlParseDocument htmlDoRead...
OSV-2023-212 Global-buffer-overflow in xmlParseEntityDecl
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57294 Crash type: Global-buffer-overflow READ 1 Crash state: xmlParseEntityDecl xmlParseMarkupDecl xmlParseInternalSubset...
PT-2023-35721 · Git +1 · Libxml2
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves functions such as xmlParseEntityDecl,...
CBL Mariner 2.0 Security Update: mariadb (CVE-2022-27387)
The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27387 advisory. - MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component...
OSV-2023-205 Global-buffer-overflow in base_C_MessageSignFinal
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57202 Crash type: Global-buffer-overflow READ 8 Crash state: baseCMessageSignFinal rpcCMessageSignFinal p11rpcserverhandle...