20267 matches found
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. There is heap-based buffer overflow in the function gprtpbuilderdoavc in ietf/rtppckmpeg4.c...
Oracle Linux 8 : perl (ELSA-2021-1678)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1678 advisory. - Fix CVE-2020-10543 bug 1839273 - Fix CVE-2020-10878 bug 1839276 Tenable has extracted the preceding description block directly from the Oracle Linux...
Oracle Linux 8 : p11-kit (ELSA-2021-1609)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1609 advisory. - Rebase to 0.23.22 to fix memory safety issues CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363 Tenable has extracted the preceding description bloc...
Oracle Linux 8 : opensc (ELSA-2021-1600)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-1600 advisory. - Fix CVE-2020-26570, CVE-2020-26571 and CVE-2020-26572 Tenable has extracted the preceding description block directly from the Oracle Linux security...
Oracle Linux 8 : raptor2 (ELSA-2021-1842)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1842 advisory. - Resolves: rhbz1900904 CVE-2020-25713 raptor2: malformed input file can lead to a segfault - Resolves: rhbz1896534 CVE-2017-18926 raptor: heap-based...
Oracle Linux 8 : glibc (ELSA-2021-1585)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1585 advisory. - CVE-2019-9169: Fix buffer overread in regexec.c 1685400. - CVE-2021-3326: iconv assertion failure in ISO-2022-JP-3 decoding 1924919 -...
CVE-2020-10064
Improper Input Frame Validation in ieee802154 Processing. Zephyr versions = v1.14.2, = v2.2.0 contain Stack-based Buffer Overflow CWE-121, Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7...
CVE-2021-30186
CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow...
CVE-2021-30186
CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow...
CVE-2021-30186
CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow...
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().
...
CVE-2020-13600
CVE-2020-13600 concerns Zephyr RTOS where a malformed SPI response for eswifi can corrupt kernel memory. Affected are Zephyr versions >= 1.14.2 and >= 2.3.0, where heap-based buffer overflow (CWE-122) is reported as the underlying issue. The vulnerability can lead to kernel memory corruptio...
CVE-2020-13600 Malformed SPI in response for eswifi can corrupt kernel memory
Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions = 1.14.2, = 2.3.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr...
CVE-2020-10064 Improper Input Frame Validation in ieee802154 Processing
Improper Input Frame Validation in ieee802154 Processing. Zephyr versions = v1.14.2, = v2.2.0 contain Stack-based Buffer Overflow CWE-121, Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7...
Arbitrary Code Execution
glibc is vulnerable to arbitrary code execution. A heap-based buffer over-read in proceednextnode in posix/regexec.c allows an attacker to execute arbitrary code on the host OS via an attempted case-insensitive regular-expression match...
openSUSE: Security Advisory for libxml2 (openSUSE-SU-2021:0764-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Heap-based Buffer Overflow in croatiacontrolltd/asterix
✍️ Description Whilst experimenting with asterix, built from commit f44cfea, compiled with Clang 10 + ASan on Ubuntu 20.04.2 LTS, we are able to induce a heap-buffer-overflow in DataItemBits::getBits asterix/src/asterix/DataItemBits.cpp:125. Since there is no bounds checking, when the software...
CVE-2018-25009
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16...