6 matches found
CVE-2026-39113
CVE-2026-39113: SQLite 옵션 SQLAR 확장의 힙 버퍼 오버플로 핵심 요약 CVE-2026-39113은 SQLite의 옵션 SQLAR 확장에서 발생하는 힙 버퍼 오버플로입니다. 확장을 로드한 애플리케이션에서 공격자가 제어된 압축 blob과 크기를 사용해 sqlaruncompress를 호출할 수 있다면, LP64 시스템에서 zlib가 힙 할당 경계를 넘어 쓰기를 수행하게 할 수 있습니다. 이는 호스트 프로세스 내부의 메모리 안전 경계 실패이며, SQLite 데이터베이스 파일 파싱 문제, 인증 우회, 또는 모든 ...
SUSE SLES15: libwayland-client0 / libwayland-client0-32bit / libwayland-cursor0 / etc (SUSE-SU-2023:1873-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1873-1 advisory. - CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. bsc1190486 Tenable has extracted the preceding...
SUSE SLES15: libwayland-client0 / libwayland-client0-32bit / libwayland-cursor0 / etc (SUSE-SU-2023:1874-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1874-1 advisory. - CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. bsc1190486 Tenable has extracted the preceding...
CVE-2021-3782
An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wlshm buffer objects, or if it...
Design/Logic Flaw
An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wlshm buffer objects, or if it...
CVE-2021-3782
An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wlshm buffer objects, or if it...