5572 matches found
CVE-2023-6915
A Null pointer dereference problem was found in idafree in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return...
DEBIAN-CVE-2023-6915
A Null pointer dereference problem was found in idafree in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return...
CVE-2023-6915
CVE-2023-6915 is a NULL pointer dereference in ida_free() within lib/idr.c of the Linux kernel leading to potential denial of service. Connected advisories show affected kernels across distributions: Astra Linux lists linux-5.10, 5.15, 6.1; CloudLinux notes ida_free in kernel (CVE-2023-6915) for ...
CVE-2023-6915
A Null pointer dereference problem was found in idafree in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return...
Linux Kernel Security Vulnerability
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux Kernel that stems from idafree in lib/idr.c. A null pointer dereference issue was discovered, and a lack of checking on function...
CVE-2023-6915: NULL Pointer Dereference
A Null pointer dereference problem was found in idafree in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return...
CVE-2024-0523: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in CmsEasy up to 7.7.7. It has been declared as critical. Affected by this vulnerability is the function getslidechildaction in the library lib/admin/languageadmin.php. The manipulation of the argument sid leads to sql injection. The attack can be launched remotely. The...
CVE-2023-37644
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
PT-2024-12649
Name of the Vulnerable Software and Affected Versions SWFTools version 0.9.2 Description The issue allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in the png read chunk function in lib/png.c. Recommendations For SWFTool...
CVE-2023-37644
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in pngreadchunk in lib/png.c...
Malware in axis-common-lib
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Ubuntu 16.04 ESM : Linux kernel (AWS) vulnerabilities (USN-6577-1)
The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6577-1 advisory. Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Kopf, and Oleksii Oleksenko discovered that some AMD processors could leak stale data from divisio...
MAL-2024-35 Malicious code in axis-common-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d46e6aa49acd26b8f52fc1e1d11ffa3fb20d5efa8e9648fb414a0c25aaa81480 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Buffer overflow
In MicroHttpServer aka Micro HTTP Server through a8ab029, ParseHeader in lib/server.c allows a one-byte recv buffer overflow via a long URI...
CVE-2023-51771
In MicroHttpServer aka Micro HTTP Server through a8ab029, ParseHeader in lib/server.c allows a one-byte recv buffer overflow via a long URI...
CVE-2023-51771: Buffer Copy without Checking Size of Input
In MicroHttpServer aka Micro HTTP Server through a8ab029, ParseHeader in lib/server.c allows a one-byte recv buffer overflow via a long URI...
CVE-2023-50965: Out-of-bounds Write
In MicroHttpServer aka Micro HTTP Server through 4398570, ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI...
CVE-2023-50965
In MicroHttpServer aka Micro HTTP Server through 4398570, ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI...
Denial of service caused by infinite recursion when parsing SVG images
Summary When parsing SVG images Dompdf performs an initial validation to ensure that paths within the SVG are allowed. One of the validations is that the SVG document does not reference itself. However, a recursive chained using two or more SVG documents is not correctly validated. Depending on t...
CVE-2023-50262
Dompdf is an HTML to PDF converter for PHP. When parsing SVG images Dompdf performs an initial validation to ensure that paths within the SVG are allowed. One of the validations is that the SVG document does not reference itself. However, prior to version 2.0.4, a recursive chained using two or...