Lustre ptlrpc module buffer overflow vulnerability (CNVD-2020-07303)

Lustre is a parallel distributed file system typically used in large computer clusters and supercomputers, of which Lustre ptlrpc is a module. A buffer overflow vulnerability exists in the Lustre ptlrpc module. The vulnerability stems from a networked system or product performing operations in...

OSSEC-HIDS Server Component Buffer Overflow Vulnerability (CNVD-2020-04124)

OSSEC-HIDS is an open source intrusion detection tool. A buffer overflow vulnerability exists in the OSSEC-HIDS server component. The vulnerability originates when a network system or product performs operations on memory without properly validating data boundaries, resulting in incorrect read an...

libsixel Heap Buffer Overflow Vulnerability

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A buffer overflow vulnerability exists in the 'imagebufferresize' function of the fromsixel.c file in versions of libsixel prior to 1.8.4. The vulnerability stems from a...

WebKit component buffer overflow vulnerability in multiple Apple products (CNVD-2020-00485)

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS Mojave is a specialized operating system developed for Mac computers. webKit is one of the web browser WebKit is a Web browser engine component. A buffer error vulnerability...

WAGO PFC 200 'I/O-Check' Buffer Overflow Vulnerability

The WAGO PFC 200 and WAGO PFC 100 are both programmable logic controllers PLCs from WAGO Germany. A buffer overflow vulnerability exists in the 'I/O-Check' function in the WAGO PFC 200 and PFC100. The vulnerability originates when a networked system or product performs an operation on memory...

The vulnerability of the `add_ie_rates` function in the Marvell WiFi kernel driver for Linux operating systems allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the addierates function in the Marvell WiFi kernel driver for Linux operating systems is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service...

Intel Baseboard Management Controller Buffer Overflow Vulnerability (CNVD-2020-12697)

The Intel Baseboard Management Controller BMC is a baseboard management controller from Intel Corporation USA. A buffer overflow vulnerability exists in Intel BMC, which originates when a networked system or product performs an operation in memory without properly validating the data boundaries,...

Envoy Buffer Overflow Vulnerability

Envoy is an open source distributed proxy server . A buffer overflow vulnerability exists in Envoy version 1.12.0. The vulnerability stems from a networked system or product that performs operations in memory without properly validating data boundaries, resulting in incorrect read and write...

ShapeShift KeepKey Buffer Overflow Vulnerability

ShapeShift KeepKey is an e-wallet device for cryptocurrency storage. ShapeShift KeepKey suffers from a punch zone overflow vulnerability. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect...

The vulnerability of Google Chrome’s swiftshader library, which allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s swiftshader library arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

typed_ast buffer overflow vulnerability

typedast is a Python parser. A buffer overflow vulnerability exists in typedast versions 1.3.0 and 1.3.1. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and write operations being...

Oniguruma Heap Buffer Overflow Vulnerability

Oniguruma is an open source regular expression library. A buffer error vulnerability exists in strlowercasematch in the regexec.c file in Oniguruma versions 6.9.3 and earlier used in PHP version 7.3.x and other products. The vulnerability stems from a web-based system or product that performs...

3S-Smart Software Solutions CODESYS Buffer Overflow Vulnerability

3S-Smart Software Solutions CODESYS V3 web server is a web server used in CODESYS products from 3S-Smart Software Solutions, Germany. A buffer overflow vulnerability exists in the web server of the runtime system in versions prior to 3S-Smart Software Solutions CODESYS 3.5.15.20. The vulnerabilit...

tcpdump buffer overflow vulnerability (CNVD-2019-41914)

tcpdump is a set of sniffing tools from Tcpdump team running under command line. The tool is mainly used for packet analysis and network traffic capture etc. A buffer overflow vulnerability exists in tcpdump. The vulnerability stems from a failure of a network system or product to properly valida...

Dell RSA BSAFE Micro Edition Suite and RSA BSAFE Crypto-C Micro Edition Buffer Overflow Vulnerabilities

The Dell RSA BSAFE Micro Edition Suite and the RSA BSAFE Crypto-C Micro Edition are both encryption toolkits from Dell USA. A buffer overflow vulnerability exists in Dell RSA BSAFE Crypto-C Micro Edition and RSA BSAFE Micro Edition Suite. The vulnerability originates when a networked system or...

The vulnerability of the SSH_MSG_CHANNEL_REQUEST command in the libssh2 library allows a attacker to trigger a service failure or gain unauthorized access to protected information.

The vulnerability of the SSHMSGCHANNELREQUEST command in the libssh2 library involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or gain unauthorized access to protected information by connecting to an S...

The vulnerability of the WrappedI420Buffer function in the WebRTC component of the Firefox ESR browser allows a attacker to trigger a service failure.

The vulnerability of the WrappedI420Buffer function in the Firefox ESR WebRTC component is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

FreeType Buffer Overflow Vulnerability (CNVD-2019-30720)

FreeType is an open source font rendering library written in the C language. A buffer overflow vulnerability exists in the skipcomment file in psaux/psobjs.c in versions of FreeType prior to 2.6.1. The vulnerability stems from a networked system or product performing operations in memory without...

CVE-2017-14202

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...

The vulnerability of the Windows Jet Database Engine database management system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine database management system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...