AZL-43834 CVE-2022-35020 affecting package advancecomp 2.5-1

Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component interceptormemcpy at /sanitizercommon/sanitizercommoninterceptors.inc...

AZL-44895 CVE-2022-35020 affecting package advancecomp 2.6-1

Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component interceptormemcpy at /sanitizercommon/sanitizercommoninterceptors.inc...

Heap overflow

Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component interceptormemcpy at /sanitizercommon/sanitizercommoninterceptors.inc...

UBUNTU-CVE-2022-35020

Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component interceptormemcpy at /sanitizercommon/sanitizercommoninterceptors.inc...

AdvanceCOMP 缓冲区错误漏洞

AdvanceCOMP is a cross-platform command line tool for data compression. The product is capable of optimizing compressed files and reducing their size. A security vulnerability exists in AdvanceCOMP v2.3, which stems from the component interceptormemcpy in...

DEBIAN-CVE-2021-4209

A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances...

CVE-2021-4209

A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances...

Null pointer dereference

A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances...

CVE-2021-4209

CVE-2021-4209 is a NULL pointer dereference in the GnuTLS library that can cause denial of service after authentication when zero-length input triggers undefined behavior in Nettle hash update paths. The vulnerability is applicable to GnuTLS and has been addressed in vendor advisories and Debian ...

CVE-2021-4209

A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances...

Buffer Overflow

u-boot is vulnerable to buffer overflows. The vulnerability exists in nfslookupreply in net/nfs.c in due to an unbounded memcpy with a failed length check, leading to a buffer overflow...

CVE-2022-38227

XPDF commit ffaf11c was discovered to contain a stack overflow via asanmemcpy at asaninterceptorsmemintrinsics.cpp...

CVE-2022-37781

fdkaac v1.0.3 was discovered to contain a heap buffer overflow via interceptormemcpy.part.46 at /sanitizercommon/sanitizercommoninterceptors.inc...

CVE-2022-38227

XPDF commit ffaf11c was discovered to contain a stack overflow via asanmemcpy at asaninterceptorsmemintrinsics.cpp...

CVE-2022-38227

XPDF commit ffaf11c was discovered to contain a stack overflow via asanmemcpy at asaninterceptorsmemintrinsics.cpp...

UBUNTU-CVE-2022-37781

fdkaac v1.0.3 was discovered to contain a heap buffer overflow via interceptormemcpy.part.46 at /sanitizercommon/sanitizercommoninterceptors.inc...

UBUNTU-CVE-2022-38227

XPDF commit ffaf11c was discovered to contain a stack overflow via asanmemcpy at asaninterceptorsmemintrinsics.cpp...

XPDF 缓冲区错误漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF suffers from a buffer error vulnerability that stems from asanmemcpy containing a stack overflow in asaninterceptorsmemintrinsics.cpp...

fdkaac 缓冲区错误漏洞

fdkaac is a command-line front-end for the libfdk-aac encoder by the Japanese individual developer nu774. A security vulnerability exists in fdkaac version v1.0.3, which originates from a heap buffer overflow contained in interceptormemcpy.part.46 via...

The vulnerability of the memcpy() function in the Samba networking communication software package allows a attacker to compromise the confidentiality of protected information or cause service failures.

The vulnerability of the memcpy function in the Samba networking software package is related to errors during the initialization of the count variable. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality of protected information or cause service failures ...