CVE-2021-33910

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value involving strdupa and alloca for a pathname controlled by a local attacker that results in an operating system crash...

CVE-2021-33910

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value involving strdupa and alloca for a pathname controlled by a local attacker that results in an operating system crash...

systemd 安全漏洞

systemd is a Linux-based system and service manager from the individual developer Lennart Poettering in Germany. The product is compatible with SysV and LSB startup scripts and provides a framework for representing dependencies between system services. A security vulnerability exists in systemd...

Ubuntu 18.04 LTS / 20.04 LTS : systemd vulnerabilities (USN-5013-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5013-1 advisory. It was discovered that systemd incorrectly handled certain mount paths. A local attacker could possibly use this issue to cause systemd to...

Debian DSA-4942-1 : systemd - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dsa-4942 advisory. The Qualys Research Labs discovered that an attacker-controlled allocation using the alloca function could result in memory corruption, allowing to crash systemd and hence...

Ubuntu 16.04 ESM : systemd vulnerabilities (USN-5013-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5013-2 advisory. USN-5013-1 fixed several vulnerabilities in systemd. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the...

Apache Commons Compress Resource Management Error Vulnerability (CNVD-2022-62077)

A resource management error vulnerability exists in Apache Commons Compress, a library for processing compressed files from the Apache Foundation, which stems from the fact that when reading a specially crafted 7Z archive, Compress can allocate a large amount of memory, resulting in an...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2021-2221)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the...

Denial Of Service (DoS)

ant is vulnerable to denial of service. An attacker is able to cause large amounts of memory to be allocated via a malicious TAR archive which would lead to an out-of-memory error that results in an application crash...

Bento4 Buffer Overflow Vulnerability (CNVD-2021-51791)

Bento4 is an open source C++ library for reading and writing MP4 files. Bento4 suffers from a buffer overflow vulnerability that stems from an unhandled memory allocation failure in Core/AP4IkmsAtom.cpp in Bento4 version 1.5.1-628 that results in a null pointer dereference, which can be exploited...

Bento4 Buffer Overflow Vulnerability (CNVD-2021-51789)

Bento4 is an open source C++ library for reading and writing MP4 files. Bento4 suffers from a buffer overflow vulnerability that stems from an unhandled memory allocation failure in Core/Ap4Atom.cpp in Bento version 1.5.1-628 that results in a null pointer dereference, which can be exploited by a...

Bento4 Denial of Service Vulnerability (CNVD-2023-00388)

Bento4 is an open source C library for reading and writing MP4 files. Bento4 version 1.5.1-628 suffers from a denial of service vulnerability that stems from an unhandled memory allocation failure in Core/Ap48bdlAtom.cpp, resulting in a NULL pointer dereference, which could be exploited by an...

Unspecified vulnerability in Bento4 (CNVD-2021-51794)

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 1.5.1-628, which stems from an unhandled memory allocation failure in ""Core/Ap4Atom.cpp"" that results in the dereferencing of the NULL pointer, and can be exploited by an...

CVE-2021-36373

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected...

CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

Nextcloud: High memory usage for generating preview of broken image

When the attached file is uploaded and a preview is generated e.g. in the folder overview of the files app, the PHP process allocates a very large amount of memory on my machine it was shortly around 5 GByte and CPU. Tested with latest master 1366b35081f1d92429787696f4175c19a602858a on Ubuntu 20....

CVE-2021-36373

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected...

CVE-2021-36374

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...

CVE-2021-36373

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected...

Design/Logic Flaw

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives...