26 matches found
OESA-2025-2796 bwa security update
BWA is a program for aligning sequencing reads against a large reference genome e.g. human genome. It has two major components, one for read shorter than 150bp and the other for longer reads. Security Fixes: BWA aka Burrow-Wheeler Aligner before 2019-01-23 has a stack-based buffer overflow in the...
EUVD-2003-0316
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2019-7148
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attempted excessive memory allocation was discovered in the function readlongnames in elfbegin.c in libelf in elfutils 0.174. Remote attackers could leverage...
PT-2024-6044 · Es5-Ext +2 · Es5-Ext +2
Name of the Vulnerable Software and Affected Versions: es5-ext versions prior to 0.10.63 Description: The issue is related to the es5-ext package, which contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into functioncopy or...
SUSE CVE-2008-3547
Buffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to cause a denial of service persistent game disruption or possibly execute arbitrary code via vectors involving many long names for "companies and clients."...
PT-2022-6750
Name of the Vulnerable Software and Affected Versions Python versions prior to 3.11.1 Python versions prior to 3.10.9 Python versions prior to 3.9.16 Python versions prior to 3.8.16 Python versions prior to 3.7.16 Description An issue exists in the IDNA RFC 3490 decoder, where an unnecessary...
CVE-2022-29243
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 22.2.7 and 23.0.4, missing input-size validation of new session names allows users to create app passwords with long names. These long names are then loaded into memory on usage,...
CVE-2021-38386
In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service because the ls command is mishandled when a directory has many files with long names...
Buffer overflow
In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service because the ls command is mishandled when a directory has many files with long names...
ALPINE-CVE-2019-7148
An attempted excessive memory allocation was discovered in the function readlongnames in elfbegin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers...
UBUNTU-CVE-2019-7148
An attempted excessive memory allocation was discovered in the function readlongnames in elfbegin.c in libelf in elfutils 0.174. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted elf input, which leads to an out-of-memory exception. NOTE: The maintainers...
elfutils 'read_long_names' function denial of service vulnerability
elfutils is a collection of utilities and libraries for reading, creating, and modifying ELF binaries. libelf is one of these libraries for parsing and interacting with ELF-formatted binaries. A security vulnerability exists in the 'readlongnames' function in the elfbegin.c file of libelf in...
DEBIAN-CVE-2016-1234
Stack-based buffer overflow in the glob implementation in GNU C Library aka glibc before 2.24, when GLOBALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service crash via a long name...
elfutils: directory traversal in read_long_names()
Directory traversal vulnerability in the readlongnames function in libelf/elfbegin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / slash in a crafted archive, as demonstrated using the ar program...
DEBIAN-CVE-2015-5957
Buffer overflow in the DumpSysVar function in var.c in Remind before 3.1.15 allows attackers to have unspecified impact via a long name...
elfutils: directory traversal in read_long_names()
Directory traversal vulnerability in the readlongnames function in libelf/elfbegin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / slash in a crafted archive, as demonstrated using the ar program...
UBUNTU-CVE-2014-9447
Directory traversal vulnerability in the readlongnames function in libelf/elfbegin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / slash in a crafted archive, as demonstrated using the ar program...
PT-2013-1072 · Libtar +3 · Libtar +3
Name of the Vulnerable Software and Affected Versions: libtar versions prior to 1.2.20 Description: The issue is related to multiple integer overflows in the th read function in lib/block.c in libtar, which can lead to a denial of service crash and possibly allow remote attackers to execute...
CVE-2010-3108
Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names...
Trend Micro OfficeScan DoS
Crash during virus scanning on large number of folders with long names...