36 matches found
SUSE CVE-2024-50262
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds write in triegetnextkey triegetnextkey allocates a node stack with size trie-maxprefixlen, while it writes trie-maxprefixlen + 1 nodes to the stack when it has full paths from the root to leaves. For exampl...
UBUNTU-CVE-2024-50262
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds write in triegetnextkey triegetnextkey allocates a node stack with size trie-maxprefixlen, while it writes trie-maxprefixlen + 1 nodes to the stack when it has full paths from the root to leaves. For exampl...
PT-2024-37050 · WordPress · The Newsletter - Api
Name of the Vulnerable Software and Affected Versions: The Newsletter - API v1 and v2 addon plugin for WordPress versions up to, and including, 2.4.5 Description: The issue allows unauthorized management of subscribers due to a PHP type juggling problem in the check api key function. This enables...
SUSE CVE-2021-32435
Stack-based buffer overflow in the function getkey in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service DoS via unspecified vectors...
PT-2022-28082 · Dropbox · Dropbox
Name of the Vulnerable Software and Affected Versions: Dropbox merou affected versions not specified Description: A critical issue was found in the SSH Public Key Handler component, specifically in the add public key function of the grouper/public key.py file. The manipulation of the public key s...
PT-2022-16309 · Unknown · Zzzcms Zzzphp
Name of the Vulnerable Software and Affected Versions: ZZZCMS zzzphp version 2.1.0 Description: A remote command execution issue was discovered in ZZZCMS zzzphp, allowing for potential exploitation via the danger key function at zzz template.php. Recommendations: For ZZZCMS zzzphp version 2.1.0,...
DEBIAN-CVE-2021-32435
Stack-based buffer overflow in the function getkey in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service DoS via unspecified vectors...
Microsoft Windows Multiple Vulnerabilities (KB4519976)
This host is missing a critical security update according to Microsoft KB4519976 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
DEBIAN-CVE-2018-10771
Stack-based buffer overflow in the getkey function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact...
PT-2018-10097 · Abcm2Ps +3 · Abcm2Ps +3
Name of the Vulnerable Software and Affected Versions: abcm2ps versions 8.13.20 and earlier Description: The issue is a stack-based buffer overflow in the get key function in parse.c that allows remote attackers to cause a denial of service, resulting in an application crash, or possibly have oth...
abcm2ps 'get_key' function stack buffer overflow vulnerability
abcm2ps is a command line program that converts music tunes from ABC notation to PostScript or SVG format. A stack buffer overflow vulnerability exists in the 'getkey' function of the parse.c file in abcm2ps 8.13.20 and earlier versions. A remote attacker could exploit this vulnerability to cause...
OpenVPN 'read_key()' function buffer overflow vulnerability
OpenVPN is an open source VPN program. A buffer overflow vulnerability exists in the OpenVPN 'readkey' function, which allows remote attackers to exploit the vulnerability by submitting a special request that could crash the application or execute arbitrary code...
CVE-2013-0176
The publickeyfromprivatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a "Client: Diffie-Hellman Key Exchange Init" packet...
security flaw
Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value...
security flaw
Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value...
security flaw
Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value...