decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer with a resultant invalid free or segmentation fault via malformed gzip data.

...

PT-2021-2871 · Busybox +4 · Busybox +4

Name of the Vulnerable Software and Affected Versions: BusyBox versions 1.32.1 and earlier Description: The issue is related to the decompress gunzip.c file in BusyBox, which mishandles the error bit on the huft build result pointer. This can lead to an invalid free or segmentation fault when...

IBM MQ Internet Pass-Thru Denial of Service Vulnerability

IBM MQ Internet Pass-Thru is an American IBM product used to support the realization of messaging between remote sites on the Internet. The product is an extended functionality component of IBM MQ that acts as a protocol channel or proxy for establishing protocols during interactions, making it...

IBM MQ Internet Pass-Thru 资源管理错误漏洞

IBM MQ Internet Pass-Thru is an American IBM product used to support the realization of messaging between remote sites on the Internet. The product is an extended functionality component of IBM MQ that acts as a protocol channel or proxy for establishing protocols during interactions, making it...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2020-74930)

SAP 3D Visual Enterprise Viewer is an application from SAP Germany. This product increases resource utilization by extending the uptime of essential products and assets whenever and wherever they are needed. A security vulnerability exists in SAP 3D visual Enterprise Viewer version-9 that...

CVE-2020-1890

A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticker message containing deliberately malformed data to load an image from a sender-controlled URL without user interaction...

CVE-2020-10894

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

Denial of Service Vulnerability in FreeRDP

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. FreeRDP suffers from a denial of service vulnerability that can be exploited by an attacker to connect to a server with malformed data to launch a denial of service attack...

FreeRDP suffers from a denial of service vulnerability (CNVD-2020-26303)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. FreeRDP suffers from a denial of service vulnerability that can be exploited by an attacker to connect to a server with malformed data to launch a denial of service attack...

FreeRDP suffers from a denial of service vulnerability (CNVD-2020-26302)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. FreeRDP suffers from a denial of service vulnerability that can be exploited by an attacker to connect to a server with malformed data to launch a denial of service attack...

Out-of-bounds access vulnerability in freerdp

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. An out-of-bounds access vulnerability exists in freerdp, which can be exploited by an attacker to connect with malformed data for out-of-bounds access...

Denial of Service Vulnerability in Wizards Secure Endpoints

Wizards Terminal Security is a computer system security protection software developed by Wizards. Wizards Secure Terminal has a denial-of-service vulnerability that can be exploited by attackers to construct malformed data and cause a denial of service...

FreeRDP suffers from a denial of service vulnerability (CNVD-2020-26301)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. FreeRDP suffers from a denial of service vulnerability that can be exploited by an attacker to connect to a server with malformed data to launch a denial of service attack...

FreeRDP suffers from a denial of service vulnerability (CNVD-2020-26304)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. FreeRDP suffers from a denial of service vulnerability that can be exploited by an attacker to connect to a server with malformed data to launch a denial of service attack...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2020-33719)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that arises from the program's failure to properly handle...

Denial of Service Vulnerability in NAop401 of Nanda Aotuo Technology (CNVD-2020-21832)

NAop401 is an OP series text screen design tool. NAop401 has a denial of service vulnerability that can be exploited by an attacker to cause a program crash by constructing a malformed evp file...

Shanghai New Win-Win Information Technology Co., Ltd Au Bump Rental Car APP has Denial of Service Vulnerability

Au Rent a Car AP is a taxi and car rental software for life travel. Shanghai New Win-Win Information Technology Company Limited Au Bump Rent A Car AP suffers from a denial-of-service vulnerability, which can be exploited by an attacker to cause the application to crash by sending null, anomalous,...

The vulnerability in the implementation of SMS processing functions in Cisco IOS and Cisco IOS XE operating systems allows a hacker to induce a service failure.

The vulnerability of the SMS processing function in Cisco IOS and Cisco IOS XE operating systems exists due to errors in the processing of SMS Protocol Data Units PDUs, which are encoded using a specific set of symbols. Exploiting this vulnerability can allow an attacker to cause service failures...

Default credentials

When Eclipse Mosquitto version 1.0 to 1.5.5 inclusive is configured to use a password file for authentication, any malformed data in the password file will be treated as valid. This typically means that the malformed data becomes a username and no password. If this occurs, clients can circumvent...

CVE-2018-12551

When Eclipse Mosquitto version 1.0 to 1.5.5 inclusive is configured to use a password file for authentication, any malformed data in the password file will be treated as valid. This typically means that the malformed data becomes a username and no password. If this occurs, clients can circumvent...