20241 matches found
Denial Of Service (DoS)
vim is vulnerable denial of service. The vulnerability exists due to a Heap-based Buffer Overflow...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Vim vulnerabilities (USN-5093-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5093-1 advisory. Brian Carpenter discovered that vim incorrectly handled memory when opening certain files. If a user was tricked into opening a...
Heap-based Buffer Overflow in hoene/libmysofa
Description There are some heap-buffer-overflows in mysofa2json of libmysofa. They are in function loudness, mysofacheck and readOHDRHeaderMessageDataLayout. System info Ubuntu 20.04.3 LTS clang 12.0.1 libmysofa github master branch commit 0cb89cb Command to Reproduce build libmysofa with...
EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2021-2564)
According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of...
Heap-based Buffer Overflow in mruby/mruby
Description Heap buffer overflow on mrb-vm-exec Proof of Concept // poc.rb 1.timesuntil% ;break Result ./mruby poc.rb ================================================================= ==1451==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6020000023d9 at pc 0x55b2fc3f1046 bp...
Heap-based Buffer Overflow in vim/vim
...
CVE-2021-32959
Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06...
CVE-2021-32959 AVEVA SuiteLink Server Buffer Overflow
Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06...
CVE-2021-32959
CVE-2021-32959 is a heap-based buffer overflow in AVEVA SuiteLink Server when processing commands 0x05/0x06. Affected products include multiple AVEVA SuiteLink Server deployments (e.g., AVEVA System Platform, InTouch, Historian, Data Acquisition, Operations Integration Core, MES, etc.). The vulne...
MGASA-2021-0431 Updated gpac packages fix security vulnerability
A specially crafted MPEG-4 input when decoding the atom for the "co64" FOURCC can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. CVE-2021-21834 A specially crafted MPEG-4 input using the "ctts" FOURCC code can cause a...
Tenable SecurityCenter OpenSSL < 1.1.1l Multiple Vulnerabilities (TNS-2021-16)
According to its self-reported version, the Tenable SecurityCenter application installed on the remote host is missing the security patch SC-202109.1, therefore affected by multiple vulnerabilities as referenced in the 1.1.1l advisory: - A heap-based buffer overflow condition exists due to the...
libslax Buffer Overflow Vulnerability (CNVD-2022-19080)
libslax is an open source implementation of the SLAX language. libslax is vulnerable to a buffer overflow vulnerability that stems from slaxLexer in slaxLexer .c, which has a heap-based buffer overflow. No detailed vulnerability details are currently available...
Security Bulletin: Vulnerability in icu CVE-2020-10531.
Summary International Components for Unicode icu is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2020-10531 DESCRIPTION: International Components for Unicode ICU for C/C++ is vulnerable to a heap-based buffer overflow, cause...
CVE-2020-23269
An issue was discovered in gpac 0.8.0. The stblGetSampleSize function in isomedia/stblread.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted media file...
CVE-2020-23267
An issue was discovered in gpac 0.8.0. The gfhintertrackprocess function in isomhintertrackprocess.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted media file...
CVE-2020-23267
An issue was discovered in gpac 0.8.0. The gfhintertrackprocess function in isomhintertrackprocess.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted media file...
CVE-2020-23266
An issue was discovered in gpac 0.8.0. The ODReadUTF8String function in odfcode.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted media file...
CVE-2020-23266
An issue was discovered in gpac 0.8.0. The ODReadUTF8String function in odfcode.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted media file...
