Lucene search
K

126 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:38 a.m.1 views

SUSE CVE-2013-2487

epan/dissectors/packet-reload.c in the REsource LOcation And Discovery aka RELOAD dissector in Wireshark 1.8.x before 1.8.6 uses incorrect integer data types, which allows remote attackers to cause a denial of service infinite loop via crafted integer values in a packet, related to the 1...

7.8CVSS7.6AI score0.03557EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 4:29 a.m.1 views

SUSE CVE-2018-7324

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-sccp.c had an infinite loop that was addressed by using a correct integer data type...

5.3CVSS6.9AI score0.01108EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:29 a.m.1 views

SUSE CVE-2018-7326

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-lltd.c had an infinite loop that was addressed by using a correct integer data type...

5.3CVSS6.9AI score0.0051EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:29 a.m.1 views

SUSE CVE-2018-7330

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thread.c had an infinite loop that was addressed by using a correct integer data type...

5.3CVSS6.9AI score0.00467EPSS
Exploits0References5
OSV
OSV
added 2021/07/20 7:15 a.m.14 views

CVE-2020-36430

libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data type is used for subtraction...

7.8CVSS7.2AI score
Exploits0References5
NVD
NVD
added 2021/07/20 7:15 a.m.10 views

CVE-2020-36430

libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data type is used for subtraction...

7.8CVSS0.00311EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2021/07/20 7:15 a.m.41 views

CVE-2020-36430

libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data type is used for subtraction...

7.8CVSS7.3AI score0.00311EPSS
Exploits0References4
Prion
Prion
added 2021/07/20 7:15 a.m.14 views

Heap overflow

libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data type is used for subtraction...

6.8CVSS7.8AI score0.00311EPSS
Exploits0References5Affected Software2
Cvelist
Cvelist
added 2021/07/20 6:47 a.m.15 views

CVE-2020-36430

libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data type is used for subtraction...

7.7AI score0.00311EPSS
Exploits0References5
CVE
CVE
added 2021/07/20 6:47 a.m.172 views

CVE-2020-36430

CVE-2020-36430 refers to a heap-based buffer overflow in libass 0.15.x, fixed in 0.15.1. The vulnerability occurs in decode_chars (used by decode_font and process_text) due to the wrong integer type used for subtraction, enabling an out-of-bounds write. Impact observed in multiple bundles: openSU...

7.8CVSS7.6AI score0.00311EPSS
Exploits0References5Affected Software1
CNVD
CNVD
added 2021/07/15 12:0 a.m.18 views

jsish Jsi_ObjArraySizer buffer overflow vulnerability

Jsish is a small JavaScript parser written in C with a built-in database.Jsish has a buffer overflow vulnerability in versions prior to 3.0.8, which stems from the failure of the product's JsiObjArraySizer function to restrict integer data boundaries, allowing an attacker to execute arbitrary cod...

9.8CVSS5.7AI score0.0307EPSS
Exploits1References1
CNVD
CNVD
added 2021/07/15 12:0 a.m.13 views

jsish Jsi_ObjSetLength function buffer overflow vulnerability

Jsish is a small JavaScript parser written in C with a built-in database.Jsish has a buffer overflow vulnerability in versions prior to 3.0.8, which stems from the failure of the product's JsiObjSetLength function to restrict integer data boundaries, allowing an attacker to execute arbitrary code...

9.8CVSS5.8AI score0.0307EPSS
Exploits1References1
NVD
NVD
added 2021/07/02 7:15 p.m.7 views

CVE-2021-33889

OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metriclen...

6.8CVSS0.00079EPSS
Exploits0References3
Prion
Prion
added 2021/07/02 7:15 p.m.6 views

Stack overflow

OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metriclen...

4.6CVSS6.7AI score0.00079EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2021/07/02 6:34 p.m.11 views

CVE-2021-33889

OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metriclen...

6.9AI score0.00079EPSS
Exploits0References3
Veracode
Veracode
added 2019/08/10 12:7 a.m.30 views

Denial Of Service (Dos)

qemu is vulnerable to denial of service. A buffer overflow in the rtl8139doreceive function in hw/net/rtl8139.c allows an attacker to crash the application using an incorrect integer data type...

7.5CVSS4.4AI score0.00888EPSS
Exploits0References13Affected Software3
Veracode
Veracode
added 2019/05/02 4:54 a.m.26 views

Arbitrary Code Execution

kernel-rt is vulnerable to arbitrary code execution. The vulnerability exists as it uses an incorrect integer data type...

8.4CVSS6.8AI score0.65851EPSS
Exploits15References43Affected Software1
OSV
OSV
added 2018/10/19 10:29 p.m.4 views

CVE-2018-18438

Qemu has integer overflows because IOReadHandler and its associated functions use a signed integer data type for a size value...

5.5CVSS9.5AI score
Exploits0References4
CNVD
CNVD
added 2018/10/12 12:0 a.m.1 views

QEMU 'rtl8139_do_receive' function buffer overflow vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A buffer overflow vulnerability exists in the 'rtl8139doreceive' function of the hw/net/rtl8139.c file in QEMU, which stems from the program...

7.5CVSS7.5AI score0.00888EPSS
Exploits0References1
OSV
OSV
added 2018/10/09 10:29 p.m.15 views

CVE-2018-17962

Qemu has a Buffer Overflow in pcnetreceive in hw/net/pcnet.c because an incorrect integer data type is used...

7.5CVSS6.6AI score0.00264EPSS
Exploits1References9
Rows per page
Query Builder