7834 matches found
CVE-2021-3743
CVE-2021-3743 is an out-of-bounds memory read flaw in the Linux kernel’s Qualcomm IPC router protocol. The issue arises from a missing sanity check, allowing a local attacker to read out-of-bounds kernel memory, potentially causing system crashes or information leakage. Documents consistently des...
Autodesk FBX Review: Buffer Error Vulnerability
Autodesk FBX Review is a software application from the American company Autodesk, Inc. A lightweight, standalone software tool for fast, efficient viewing of 3D assets and animations. Autodesk FBX Review suffers from a buffer error vulnerability that stems from a boundary condition. A remote...
AZL-8902 CVE-2021-3677 affecting package postgresql for versions less than 14.2-1
A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...
CVE-2021-3677: Exposure of Sensitive Information to an Unauthorized Actor
A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...
CVE-2021-3677
A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...
CVE-2021-3677
A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2022-1164)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem in the way a user sends a TIPC datagram to one or more destinations. This flaw allows a local user to read some kernel memory. This issue is limited to no more than 7 bytes and the user cannot control what is read. This flaw affects the Linux kernel versions prior to 5.17-rc1.
...
VulnCheck KEV: CVE-2017-9798
Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker...
CVE-2022-0114
Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver...
CVE-2022-0114
Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver...
DEBIAN-CVE-2022-0114
Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver...
CVE-2022-0114
Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver...
CVE-2022-23429
An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...
CVE-2022-23429
An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...
DEBIAN-CVE-2022-0382
An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem, in the way a user sends a TIPC datagram to one or more destinations. This flaw allows a local user to read some kernel memory. This issue is limited to no more than 7 bytes, and the user...
CVE-2022-23429
An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...
Google Android Buffer Overflow Vulnerability
Google Android is a Linux-based open source operating system from Google. Google Android buffer overflow vulnerability, the vulnerability stems from improper boundary checking. An attacker can exploit the vulnerability to read invalid memory and cause the application to crash...
PT-2022-15988
Name of the Vulnerable Software and Affected Versions Audio HAL Service versions prior to SMR Feb-2022 Release 1 Description The issue is caused by an improper boundary check in the audio hal service, allowing attackers to read invalid memory, which can lead to an application crash. Recommendatio...
curl:curl_fuzzer: Heap-use-after-free in nghttp2_hd_deflate_hd_bufs
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=6691284327202816 Project: curl Fuzzing Engine: honggfuzz Fuzz Target: curlfuzzer Job Type: honggfuzzasancurl Platform Id: linux Crash Type: Heap-use-after-free READ 3 Crash Address: 0x60d0000001e8 Crash...