Low: libguestfs-winsupport

Issue Overview: An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute...

Amazon Linux 2 : libguestfs-winsupport (ALAS-2020-1522)

The version of libguestfs-winsupport installed on the remote host is prior to 7.2-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1522 advisory. An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running...

MikroTik RouterOS Integer Underflow Vulnerability

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. An integer underflow vulnerability exists in the SMB server in versions of MikroTik RouterOS prior to 6.45.5, whic...

CVE-2019-16160

An integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote unauthenticated attackers to crash the service...

Integer overflow

An integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote unauthenticated attackers to crash the service...

CVE-2019-16160

An integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote unauthenticated attackers to crash the service...

CVE-2019-16160

CVE-2019-16160 affects MikroTik RouterOS: an integer underflow in the SMB server prior to version 6.45.5 allows remote unauthenticated attackers to crash the service (DoS). Affected component is the SMB server in RouterOS; impact is service crash with no confidentiality/integrity gain reported. P...

CVE-2020-14378

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the movedesc function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause movedesc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhostcrypto is...

CVE-2020-14378

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the movedesc function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause movedesc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhostcrypto is...

AZL-38821 CVE-2020-14378 affecting package ceph for versions less than 18.2.2-1

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the movedesc function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause movedesc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhostcrypto is...

Integer overflow

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the movedesc function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause movedesc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhostcrypto is...

CVE-2020-14378

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the movedesc function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause movedesc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhostcrypto is...

CVE-2020-14378

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the movedesc function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause movedesc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhostcrypto is...

CVE-2020-14378

The advisory data confirms CVE-2020-14378 affects DPDK, specifically an integer underflow in move_desc that can cause a long-running loop and CPU exhaustion. Exposures include DPDK versions before 18.11.10 and before 19.11.5, with potential impact on vhost_crypto workloads that may block VMs/netw...

CVE-2020-14378

An integer underflow flaw was found in the movedesc function that can lead to large amounts of CPU cycles being consumed in a long-running loop. This flaw allows an attacker to cause movedesc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhostcrypto is being used, this...

Denial Of Service (DoS)

dpdk is vulnerable to denial of service. An integer underflow vulnerability allows an attacker to crash the application...

CVE-2020-14378

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the movedesc function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause movedesc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhostcrypto is...

Arbitrary Code Execution

autotrace is vulnerable to arbitrary code execution. The vulnerability exists as integer underflow could occur in the inputbmpreader function in input-bmp.c by providing a small value in the biSize field in the header of a BMP file...

Arbitrary Code Execution

mutt is vulnerable to arbitrary code execution. The vulnerability exists through an integer underflow in imapquotestring of imap/util.c...

Denial Of Service (DoS)

GraphicsMagick is vulnerable to denial of service. A remote attacker is able to crash the application via excessive memory allocation due to an integer underflow in ReadPICTImage in coders/pict.c...