in mcfriend99/bird

✍️ Description Heap-based 1-byte write violation. Certain programs can cause the parser/syntax-checker to write out of bounds. The below program writes a single byte out of bounds. 🕵️‍♂️ Proof of Concept Program: var a = 'outer' def test var a = 'inner' echo 'It works! $a' echo a echo test test def...

Heap-based Buffer Overflow in mcfriend99/bird

✍️ Description Heap-based Write Violation. Certain input programs can result in write access violations by the syntax checker component of the interpreter. One such program writes 23 bytes onto the heap outside of bounds and may result in arbitrary code execution and memory leaks. 🕵️‍♂️ Proof of...

CVE-2020-22033

A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vfvmafmotion.c in convolutiony8bit, which could let a remote malicious user cause a Denial of Service...

CVE-2020-22033

A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vfvmafmotion.c in convolutiony8bit, which could let a remote malicious user cause a Denial of Service...

CVE-2020-22023

A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filterframe at libavfilter/vfbitplanenoise.c, which might lead to memory corruption and other potential consequences...

CVE-2020-22034

A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vffloodfill.c, which might lead to memory corruption and other potential consequences...

CVE-2020-22017

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at fffillrectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences...

UBUNTU-CVE-2020-22031

A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vfw3fdif.c in filter16complexlow, which might lead to memory corruption and other potential consequences...

CVE-2020-22031

A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vfw3fdif.c in filter16complexlow, which might lead to memory corruption and other potential consequences...

CVE-2020-22023

A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filterframe at libavfilter/vfbitplanenoise.c, which might lead to memory corruption and other potential consequences...

CVE-2020-22025

A heap-based Buffer Overflow vulnerability exists in gaussianblur at libavfilter/vfedgedetect.c, which might lead to memory corruption and other potential consequences...

CVE-2020-22025

CVE-2020-22025 is a heap-based buffer overflow in FFmpeg’s gaussian_blur implementation (libavfilter/vf_edgedetect.c) that can lead to memory corruption. Public advisories describe FFmpeg components affected (e.g., libavfilter, libavcodec) and advise upgrading FFmpeg to fixed versions. Debian DSA...

CVE-2020-22027

A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vfneighbor.c, which might lead to memory corruption and other potential consequences...

CVE-2020-22031

CVE-2020-22031 is a heap-based Buffer Overflow in FFmpeg 4.2 specifically at libavfilter/vf_w3fdif.c (filter16_complex_low) that may cause memory corruption and other potential consequences. Public advisories (Ubuntu/Debian) confirm FFmpeg fixes are available via package updates; remediation is t...

GENIVI Alliance DLT

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: GENIVI Alliance Equipment: DLT-Daemon Vulnerability: Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could lead to remote code execution or crash the...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. There is heap-based buffer overflow in the function gprtpbuilderdoavc in ietf/rtppckmpeg4.c...

Oracle Linux 8 : perl (ELSA-2021-1678)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1678 advisory. - Fix CVE-2020-10543 bug 1839273 - Fix CVE-2020-10878 bug 1839276 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : p11-kit (ELSA-2021-1609)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1609 advisory. - Rebase to 0.23.22 to fix memory safety issues CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363 Tenable has extracted the preceding description bloc...

Oracle Linux 8 : opensc (ELSA-2021-1600)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-1600 advisory. - Fix CVE-2020-26570, CVE-2020-26571 and CVE-2020-26572 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : raptor2 (ELSA-2021-1842)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1842 advisory. - Resolves: rhbz1900904 CVE-2020-25713 raptor2: malformed input file can lead to a segfault - Resolves: rhbz1896534 CVE-2017-18926 raptor: heap-based...