17 matches found
EUVD-2023-52113
Malicious code in bioql PyPI...
CVE-2023-48024
Liblisp through commit 4c65969 was discovered to contain a use-after-free vulnerability in void hashdestroyhashtablet h at hash.c...
CVE-2023-48024
Liblisp through commit 4c65969 was discovered to contain a use-after-free vulnerability in void hashdestroyhashtablet h at hash.c...
CVE-2023-48024
CVE-2023-48024 affects Liblisp up to commit 4c65969, with a use-after-free in hash_destroy(hash_table_t *h) located in hash.c. Root cause: use-after-free during hash table destruction. Impact: memory safety risk as described in the sources; exploitation status is not detailed in the provided docu...
SUSE CVE-2017-11695
Heap-based buffer overflow in the allocsegs function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...
PT-2019-5181 · Ncurses +8 · Ncurses +8
Name of the Vulnerable Software and Affected Versions: ncurses versions prior to 6.1-20191012 Description: The issue is related to a heap-based buffer over-read in the fmt entry function in tinfo/comp hash.c of the terminfo library. This could allow a remote attacker to disclose protected...
CVE-2017-11695
Heap-based buffer overflow in the allocsegs function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...
CVE-2017-11696
CVE-2017-11696 is a heap-based buffer overflow in NSS (hash_open in lib/dbm/src/hash.c) exploitable via a crafted cert8.db file. Connected sources confirm the NSS library is affected and provide remediation guidance: upgrade to a newer NSS version, e.g., Gentoo GLSA-202003-37/GLSA 202003-37 recom...
CVE-2017-11695
CVE-2017-11695 : Heap-based buffer overflow in the alloc_segs function of NSS (lib/dbm/src/hash.c) used by Mozilla NSS when processing crafted cert8.db files. Exploitation is context-dependent with unspecified impact per the entry. Public details explicitly describe the overflow but do not specif...
CVE-2017-11695
Heap-based buffer overflow in the allocsegs function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...
CVE-2017-11696
Heap-based buffer overflow in the hashopen function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...
CVE-2017-11697
The hashopen function in hash.c:229 in Mozilla Network Security Services NSS allows context-dependent attackers to cause a denial of service floating point exception and crash via a crafted cert8.db file...
CVE-2017-11695
Heap-based buffer overflow in the allocsegs function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...
Mozilla Network Security Services Heap Buffer Overflow Vulnerability
Mozilla Network Security Services is a library that provides cross-platform support for SSL, S/MIME and other Internet security standards. A buffer overflow vulnerability exists in allocsegs in the Network Security Services file lib/dbm/src/hash.c, which allows an attacker to execute arbitrary...
php 5.1.2 zend-hash.c 安全模式绕过
No description provided by source...
Null pointer dereference
Unspecified vulnerability in the chtbllookup function in hash.c for WzdFTPD 8.0 and earlier allows remote attackers to cause a denial of service via a crafted FTP command, probably due to a NULL pointer dereference...
CVE-2007-0428
Vulnerability summary (CVE-2007-0428): WzdFTPD 8.0 and earlier is affected by a NULL pointer dereference in the function chtbl_lookup (hash.c). The flaw allows remote attackers to cause a denial of service by sending a crafted FTP command, via the network, presumably without authentication. The i...