Bento4 安全漏洞

Bento4 is an open source C library for reading and writing MP4 files. Bento4 version 1.5.1.0 suffers from a denial of service vulnerability that stems from a memory allocation failure in the AP4 CttsAtom class in Core/Ap4CttsAtom.cpp, which can be exploited by remote attackers to cause a denial o...

openSUSE 15 Security Update : systemd (openSUSE-SU-2021:2809-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2809-1 advisory. - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server runni...

SUSE-SU-2021:2813-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - usbredir: free call on invalid pointer in bufpalloc bsc1189145, CVE-2021-3682 - NULL pointer dereference in ESP bsc1180433, CVE-2020-35504 bsc1180434, CVE-2020-35505 bsc1180435, CVE-2020-35506 - NULL pointer dereference iss...

CVE-2018-10237

A vulnerability was found in Guava where the AtomicDoubleArray and CompoundOrdering classes were found to allocate memory based on size fields sent by the client without validation. A crafted message could cause the server to consume all available memory or crash leading to a denial of service...

PT-2021-6486 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 14.0.2 GitLab versions prior to 13.12.6 GitLab versions prior to 13.11.6 Description: The issue is related to the GitLab Webhook feature, which can be exploited to cause a denial of service. This is due to the potenti...

DEBIAN-CVE-2020-18899

An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted input...

CVE-2020-18899

An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted input...

CVE-2020-18899

An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted input...

PYSEC-2021-879

An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted input...

Design/Logic Flaw

An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted input...

CVE-2020-18899

An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted input...

PYSEC-2021-879

An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted input...

UBUNTU-CVE-2020-18899

An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted input...

PT-2021-6703

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27 Description The issue is related to an uncontrolled memory allocation in the DataBufdatasubBox.length-sizeofbox function of the Exiv2 library, which can be exploited by a remote attacker to cause a denial of service DOS via ...

Exiv2 资源管理错误漏洞

Exiv2 is a set of C++ libraries and command line applications for managing image metadata from the individual developer Andreas Huggel. The product provides functionality to read and write image metadata in a variety of formats including EXIF, IPTC and XMP. A resource management error vulnerabili...

CVE-2020-18899

Exiv2 CVE-2020-18899 is a memory-allocation (DOS) vulnerability affecting Exiv2 0.27.x by crafting input that triggers uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)). Public sources in connected documents confirm the issue and indicate remediation by upgrading to Exiv2 0...

CVE-2020-18899

An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted input...

CVE-2020-18899

An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted input...

Cars and hospital equipment running Blackberry QNX may be affected by BadAlloc vulnerability

Following an announcement by Blackberry the U.S. Food & Drug Administration FDA and the Cybersecurity & Infrastructure Security Agency CISA have put out alerts that vulnerabilities found in the Blackberry QNX real-time operating system RTOS may introduce risks for certain medical devices...

CVE-2021-21862

Multiple exploitable integer truncation vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an improper memory allocation resulting in a heap-based buffer overflow that causes memory...