36 matches found
Denial Of Service (DoS)
github.com/etcd-io/etcd is vulnerable to denial of service. An attacker is able to cause a panic in the decodeRecord method and a denial of service condition in a RAFT participant when decoding the WAL by forging a large frame size...
AZL-6388 CVE-2020-15106 affecting package etcd for versions less than 3.5.0-3
In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely large frame size that can unintentional...
CVE-2020-15106
In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely large frame size that can unintentional...
PT-2020-14189 · Etcd +4 · Etcd +4
Name of the Vulnerable Software and Affected Versions: etcd versions 3.3.0 through 3.3.22 etcd versions 3.4.0 through 3.4.9 Description: The issue is related to a lack of validation on the size of a record stored in the length field of a WAL file. This allows for the creation of a forged, extreme...
Integer overflow
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while processing preferred network offload scan results integer overflow may lead to buffer overflow when large frame length is received from FW...
Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2018-08465)
Samsung mobile devices are smart mobile devices released by Samsung in South Korea.Android N is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the versioning service of Samsung mobile devices usi...
CVE-2018-9139
On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...
CVE-2018-9139
On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...
Buffer overflow
On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...
CVE-2018-9139
On Samsung mobile devices with N7.x software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165...
Sql injection
tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service segmentation fault via a large frame, a related issue to CVE-2017-14266...
UBUNTU-CVE-2016-6160
tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service segmentation fault via a large frame, a related issue to CVE-2017-14266...
CVE-2016-6160
tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service segmentation fault via a large frame, a related issue to CVE-2017-14266...
CVE-2016-6160
tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service segmentation fault via a large frame, a related issue to CVE-2017-14266...
CVE-2016-6160: Undefined Security Weakness
tcprewrite in tcpreplay before 4.1.2 allows remote attackers to cause a denial of service segmentation fault via a large frame, a related issue to CVE-2017-14266...
PT-2017-8919
Name of the Vulnerable Software and Affected Versions tcpreplay versions prior to 4.1.2 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, by sending a large frame. Recommendations For versions prior to 4.1.2, update to version 4.1.2 or...