420 matches found
DEBIAN-CVE-2024-5629
An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory...
frr: mishandled malformed data leading to a crash
A data mishandling vulnerability was found in FRRouting. A malformed MPREACHNLRI data can lead to a crash, resulting in a denial of service...
DEBIAN-CVE-2023-40477
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must...
PT-2024-20169 · Unknown · Merge Dicom Toolkit C/C++
Name of the Vulnerable Software and Affected Versions: Merge DICOM Toolkit C/C++ affected versions not specified Description: The issue is related to an out-of-bounds read when the MC Open File function is used to read malformed DICOM data, potentially resulting in over-reading of the memory buff...
frr: mishandled malformed data leading to a crash
A data mishandling vulnerability was found in FRRouting. A malformed MPREACHNLRI data can lead to a crash, resulting in a denial of service...
SUSE CVE-2024-31949
In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...
CVE-2024-31949
An infinite loop vulnerability was found in FRRouting. Malformed data when receiving an MP/GR capability as a dynamic capability can result in a pointer not advancing. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product...
CVE-2024-31949
In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...
DEBIAN-CVE-2024-31949
In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...
CVE-2024-31949
In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...
UBUNTU-CVE-2024-31949
In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...
CVE-2024-31949
In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...
CVE-2024-31949
CVE-2024-31949 — FRRouting (FRR) through 9.1 Description (from connected docs): An infinite loop can occur when FRR receives a MP/GR capability as a dynamic capability, caused by malformed data that prevents a pointer from advancing. This is within FRR’s BGP handling, affecting FRR up to version ...
CVE-2024-31949
In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...
CVE-2024-31949
In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...
Mageia: Security Advisory (MGASA-2024-0065)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PYSEC-2024-148
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. When calls to external contracts are made, we write the input buffer starting at byte 28, and allocate the return buffer to start at byte 0 overlapping with the input buffer. When checking RETURNDATASIZE for dynamic...
SUSE-SU-2023:4483-1 Security update for frr
This update for frr fixes the following issues: - CVE-2023-46752: Fixed denial of service caused by mishandling malformed MPREACHNLRI data bsc1216627. - CVE-2023-46753: Fixed denial of service caused by crafted BGP UPDATE messages bsc1216626...
samba: type confusion in mdssvc RPC service for spotlight
A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol...
