2506 matches found
The vulnerability of the HyperLogLog algorithm in a resident database management system for NoSQL Redis lies in the fact that the output of the operation may exceed the buffer limits in memory. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.
The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis stems from a flaw in the HyperLogLog data structure. This flaw occurs when the SETRANGE command is executed, allowing up to 3 bytes of information to be written beyond the memory buffer...
The vulnerability of the calculate_gain() function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to compromise data integrity, gain unauthorized access to protected information, and cause service failure.
The vulnerability of the calculategain function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to the escape from memory buffers. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 involve an exploit where operations are performed outside the buffer in memory, allowing attackers to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the execution of operations beyond the buffer in memory. Exploiting these vulnerabilities can allow a...
Siemens LOGO!8 PLC < 1.82.02 Improper Restriction within Memory Buffer or Session Fixation DoS (ICSA-19-162-03)
Binary data 720304.prm...
Buffer Overflow in centra
Denial of Service Impact Affected Centra versions will, when not in stream mode, buffer responses to requests into memory with no size limit. This issue affects anyone requesting content from untrusted sources. Patches Version 2.4.0 resolves the issue by limiting the size of buffered response bod...
The vulnerability of the WebSocket component in Firefox browsers, which allows attackers to disclose protected information
The vulnerability of the WebSocket component in Firefox arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this mechanism...
Exim mail server vulnerability related to an operation exceeding buffer boundaries in memory, allowing an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service
A vulnerability in the Exim mail server is related to errors in processing objects in memory. Exploitation of the vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause denial of service...
The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to execute arbitrary code on the target system.
The vulnerability of the DHCP server service for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using specially crafted packets...
The vulnerability of the PAN-OS operating system, related to the operation of data out of the buffer in memory, allows attackers to cause memory corruption.
The vulnerability of the PAN-OS operating system is related to the operation of data out of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause memory corruption or service failures when the current client interactive session is re-executed...
EZAutomation EZ PLC Editor
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: EZAutomation Equipment: EZ PLC Editor Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...
CVE-2019-5612
In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before 11.2-RELEASE-p14, the kernel driver for /dev/midistat implements a read handler that is not thread-safe. A multi-threaded program c...
The vulnerability of the Windows operating system arises from operations that go beyond buffer boundaries in memory, allowing attackers to trigger a system failure.
The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause a service failure through a specially created application...
CVE-2017-14202
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...
Design/Logic Flaw
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...
CVE-2017-14202
CVE-2017-14202 in Zephyr concerns the shell component where an improper restriction of operations within the bounds of a memory buffer can be triggered by a serial or telnet connection, causing a crash and potentially arbitrary code execution. Affected: Zephyr shell versions prior to 1.14.0 on al...
CVE-2017-14202 The shell implementation does not protect against buffer overruns resulting in unpredictable behavior.
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...
The vulnerability of the buffer in the dev.c software for working with YubiKey security keys allows a perpetrator to execute arbitrary code.
The vulnerability of the buffer in the dev.c software for working with YubiKey security keys is related to the execution of operations beyond the boundaries of the memory buffer. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure or execute arbitrary code.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine arises from reading beyond the buffer boundary in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...
NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0070)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel packages installed that are affected by multiple vulnerabilities: - Integer overflow in the aiosetupsinglevector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibl...
NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0074)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel-rt packages installed that are affected by multiple vulnerabilities: - Integer overflow in the aiosetupsinglevector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or...