Lucene search
+L

674 matches found

AlpineLinux
AlpineLinux
added 2022/08/25 7:37 p.m.90 views

CVE-2020-27796

A heap-based buffer over-read was discovered in the invertptdynamic function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

7.8CVSS7.5AI score0.00312EPSS
SaveExploits2
CVE
CVE
added 2022/08/25 7:37 p.m.89 views

CVE-2020-27796

CVE-2020-27796 affects UPX 4.0.0, with a heap-based buffer over-read in the function invert_pt_dynamic within p_lx_elf.cpp , exploitable via a crafted Mach-O file. All connected sources consistently describe this as a vulnerability in UPX 4.0.0, without providing vendor patches or explicit mitiga...

7.8CVSS7.4AI score0.00312EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2022/08/25 7:37 p.m.33 views

CVE-2020-27796

A heap-based buffer over-read was discovered in the invertptdynamic function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

7.5AI score0.00312EPSS
SaveExploits2References1
Debian CVE
Debian CVE
added 2022/08/25 7:37 p.m.61 views

CVE-2020-27796

A heap-based buffer over-read was discovered in the invertptdynamic function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

7.8CVSS7.5AI score0.00312EPSS
SaveExploits2
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.6 views

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which stems from a heap-based out-of-bounds read that can be implemented by an attacker via a carefully crafted Mach-O file to the getle64 function of its bele.h component...

7.8CVSS7.3AI score0.00363EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.7 views

UPX 安全漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which originates from an attacker being able to cause invalid memory address references to the elflookup function of its plxelf.cpp component via a carefully crafted Mach-O file...

5.5CVSS7.3AI score0.00273EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.5 views

UPX 数字错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which stems from an attacker being able to cause a floating-point exception in the elflookup function of its plxelf.cpp component via a carefully crafted Mach-O file...

5.5CVSS7.2AI score0.00273EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.5 views

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which stems from a heap-based out-of-bounds read that can be implemented by an attacker via a carefully crafted Mach-O file to the invertptdynamic function of its plxelf.cpp...

7.8CVSS7.3AI score0.00312EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.6 views

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which originates from a heap-based out-of-bounds read that can be implemented by an attacker via a carefully crafted Mach-O file to the getle32 function of its bele.h component...

7.8CVSS7.3AI score0.00312EPSS
SaveExploits1References2
The Hacker News
The Hacker News
added 2022/08/17 6:20 a.m.58 views

North Korea Hackers Spotted Targeting Job Seekers with macOS Malware

The North Korea-backed Lazarus Group has been observed targeting job seekers with malware capable of executing on Apple Macs with Intel and M1 chipsets. Slovak cybersecurity firm ESET linked it to a campaign dubbed "Operation Interception" that was first disclosed in June 2020 and involved using...

6.8AI score
SaveExploits0
NVD
NVD
added 2022/06/15 2:15 p.m.23 views

CVE-2022-20174

In exynossecEnvinit of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

4.4CVSS0.00111EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/06/14 12:0 a.m.47 views

Google Android out-of-bounds read vulnerability (CNVD-2022-53386)

Google Android is a Linux-based open source operating system from Google, Inc. An out-of-bounds read vulnerability exists in Google Android, which originates in exynossecEnvinit in mach-gs101.c. An out-of-bounds read may occur due to a boundary checking error. An attacker could exploit this...

4.4CVSS3.4AI score0.00111EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/26 12:0 a.m.45 views

Radare2 buffer overflow vulnerability (CNVD-2022-77073)

Radare2 is a set of libraries and tools for working with binary files. A buffer overflow vulnerability exists in Radare2 version 5.5.2, which originates from a boundary error in the /libr/core/analobjc.c mach-o parser when processing untrusted input. A remote attacker could exploit this...

5.5CVSS5.8AI score0.00931EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/24 3:15 p.m.4 views

CVE-2021-44975

radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/analobjc.c mach-o parser...

5.5CVSS6.7AI score0.00931EPSS
SaveExploits1References4
NVD
NVD
added 2022/05/24 3:15 p.m.24 views

CVE-2021-44975

radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/analobjc.c mach-o parser...

5.5CVSS0.00931EPSS
SaveExploits1References3
OSV
OSV
added 2022/05/24 3:15 p.m.22 views

CVE-2021-44975

radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/analobjc.c mach-o parser...

5.5CVSS6.7AI score
SaveExploits0References3
Prion
Prion
added 2022/05/24 3:15 p.m.17 views

Buffer overflow

radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/analobjc.c mach-o parser...

4.3CVSS5.7AI score0.00931EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/05/24 3:15 p.m.6 views

UBUNTU-CVE-2021-44975

radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/analobjc.c mach-o parser...

5.5CVSS6.8AI score0.00931EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
added 2022/05/24 2:40 p.m.76 views

CVE-2021-44975

radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/analobjc.c mach-o parser...

5.5CVSS5.9AI score0.00931EPSS
SaveExploits1
Cvelist
Cvelist
added 2022/05/24 2:40 p.m.43 views

CVE-2021-44975

radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/analobjc.c mach-o parser...

6.1AI score0.00931EPSS
SaveExploits1References3
Rows per page
Query Builder