433 matches found
CVE-2022-35101: Out-of-bounds Write
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memset-vec-unaligned-erms.S...
SWFTools 缓冲区错误漏洞
SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a segmentation violation in /multiarch/memset-vec-unaligned-erms...
CVE-2022-34266
The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service application crash, a different vulnerability than CVE-2022-0562. When processing a malicious TIFF file, an invalid range may be passed as an argument to the memset function within...
UBUNTU-CVE-2022-34266
The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service application crash, a different vulnerability than CVE-2022-0562. When processing a malicious TIFF file, an invalid range may be passed as an argument to the memset function within...
CVE-2022-34266
The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service application crash, a different vulnerability than CVE-2022-0562. When processing a malicious TIFF file, an invalid range may be passed as an argument to the memset function within...
CVE-2022-34266
LibTIFF (libtiff) is affected by CVE-2022-34266 and related CVEs in the same family. CVE-2022-34266 arises when processing a crafted TIFF file: an invalid range passed to memset() in TIFFFetchStripThing() (tif_dirread.c) can cause a segfault after using an uninitialized resource, leading to a cra...
CVE-2022-34266
The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service application crash, a different vulnerability than CVE-2022-0562. When processing a malicious TIFF file, an invalid range may be passed as an argument to the memset function within...
CVE-2022-34266: Use of Uninitialized Resource
The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service application crash, a different vulnerability than CVE-2022-0562. When processing a malicious TIFF file, an invalid range may be passed as an argument to the memset function within...
MariaDB Buffer Overflow Vulnerability (CNVD-2022-51592)
MariaDB is a free and open source database management system from the Mariadb Foundation and a branch version of MySQL that uses the Maria storage engine.MariaDB has a security vulnerability that stems from the discovery of a memory poisoning in the /libsanitizer/sanitizercommon/sanitizercommon A...
MariaDB __interceptor_memset Buffer Overflow DoS
The vulnerability of the interceptormemset function /libsanitizer/sanitizercommon/sanitizercommoninterceptors.inc of the MariaDB database management system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to...
DEBIAN-CVE-2022-32091
MariaDB v10.7 was discovered to contain an use-after-poison in in interceptormemset at /libsanitizer/sanitizercommon/sanitizercommoninterceptors.inc...
ALPINE-CVE-2022-32091
MariaDB v10.7 was discovered to contain an use-after-poison in in interceptormemset at /libsanitizer/sanitizercommon/sanitizercommoninterceptors.inc...
CVE-2022-32091
MariaDB v10.7 was discovered to contain an use-after-poison in in interceptormemset at /libsanitizer/sanitizercommon/sanitizercommoninterceptors.inc...
MariaDB 资源管理错误漏洞
MariaDB is a free and open source database management system from the Mariadb Foundation and a branch version of MySQL that uses the Maria storage engine.MariaDB has a security vulnerability that stems from the discovery of a memory poisoning in the /libsanitizer/sanitizercommon/sanitizercommon A...
GSD-2022-1002002 Bluetooth: use memset avoid memory leaks
Bluetooth: use memset avoid memory leaks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.111 by commit...
GSD-2022-1001718 Bluetooth: use memset avoid memory leaks
Bluetooth: use memset avoid memory leaks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...
GSD-2022-1001392 Bluetooth: use memset avoid memory leaks
Bluetooth: use memset avoid memory leaks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...
PT-2022-29665
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to a potential security vulnerability in the Bluetooth component, where memset is used to avoid memory leaks. The actual impact and attack plausibility have not yet been...
DEBIAN-CVE-2021-44510
An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a calculation of the size of calls to memset in opfnj3 in srport/opfnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the...
CVE-2021-44502
An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can control the size of a memset that occurs in calls to utilformat in srunix/utiloutput.c...