PT-2022-25607 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: The issue is related to a memory allocation problem that can lead to denial of service. Recommendations: For Bento4 version 1.6.0-639, at the moment, there is no information about a newer version that...

CVE-2022-40885

CVE-2022-40885 affects Bento4 v1.6.0-639 and describes a memory allocation issue that can lead to denial of service. The NVD entry lists a MEDIUM base score (5.5) with local, low-attack-vector/access complexity, requiring user interaction, and HIGH impact on availability. Connected documents corr...

CVE-2022-40885

Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service...

Moderate: java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixes: OpenJDK: improper MultiByte conversion can lead to buffer overflow JGSS, 8286077 CVE-2022-21618 OpenJDK: excessive memory allocation in X.509 certificate...

ALSA-2022:7000 Moderate: java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixes: OpenJDK: improper MultiByte conversion can lead to buffer overflow JGSS, 8286077 CVE-2022-21618 OpenJDK: excessive memory allocation in X.509 certificate...

Double Free

Overview Affected versions of this package are vulnerable to Double Free in the split function in contrib/shpsort.c. This could allow information exposure or code execution via manipulation of malloc. Remediation Upgrade shapelib to version 1.6.0 or higher. References - GitHub Commit - GitHub Iss...

SUSE-SU-2022:3617-1 Security update for netty

This update for netty fixes the following issues: - CVE-2020-11612: The ZlibDecoders allow for unbounded memory allocation while decoding a byte stream bsc1168932 - CVE-2021-21290: Information disclosure via the local system temporary directory bsc1182103 - CVE-2021-37136: Bzip2Decoder doesn't...

UBUNTU-CVE-2022-0699

A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc...

SUSE-SU-2022:3598-1 Security update for exiv2

This update for exiv2 fixes the following issues: - CVE-2021-37621: Fixed denial of service due to infinite loop in Image:printIFDStructure bsc1189333. - CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read bsc1189332. - CVE-2021-37619: Fixed out-of-bounds read in...

CVE-2022-2879

Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB...

CVE-2022-2879

Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB...

Design/Logic Flaw

Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB...

Denial Of Service (DoS)

go is vulnerable to denial of service DoS attacks. A remote attacker is able to allocate unbounded amounts of memory using Reader.Read via passing a maliciously crafted archive, causing a system crash due to resource exhaustion...

Denial Of Service (DoS)

go is vulnerable to Denial Of Service DoS. A remote attacker is able to allocate unbounded amounts of memory using checkHeight via passing a maliciously crafted archive, causing a system crash due to resource exhaustion...

Amazon Linux 2022 : curl, curl-minimal, libcurl (ALAS2022-2022-145)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-145 advisory. A vulnerability was found in curl. This issue occurs because a malicious server can serve excessive amounts of Set-Cookie: headers in an HTTP response to curl, which stores all of them. This fl...

CVE-2022-2879

Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB...

CVE-2022-2879

CVE-2022-2879 affects Go-based archive/header reading (unbounded header memory in Reader.Read; fixed to cap header blocks at 1 MiB). Connected advisories show impact on container tooling: buildah versions older than 1.41.4-2 and podman versions older than 5.6.1-2 are affected. Upgrading to builda...

The vulnerability of the create_helper() function in the /src/helper.c component of the DNS server Dnsmasq, which allows a hacker to cause a service failure.

The vulnerability of the createhelper function in the /src/helper.c component of the DNS server Dnsmasq is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a specially created DHCP response...

Juniper Junos OS Vulnerability (JSA69876)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69876 advisory. - In VxLAN scenarios on EX4300-MP, EX4600, QFX5000 Series devices an Uncontrolled Memory Allocation vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Jun...

CVE-2022-33747

Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M Physical-to-Machine mapping. When large pages are in use to map guest pages in the 2nd-stage page tables, such a removal operation may incur a memory allocation to replace a...