The vulnerability of the `get_icu_disp_value_src_php` function in the PHP programming language allows a perpetrator to trigger a service failure or possibly cause other effects.

The vulnerability of the geticudispvaluesrcphp function in the PHP programming language is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to trigger a service failure through the call to localgetdisplayname...

UBUNTU-CVE-2021-46238

GPAC v1.1.0 was discovered to contain a stack overflow via the function gfnodegetname at scenegraph/basescenegraph.c. This vulnerability can lead to a program crash, causing a Denial of Service DoS...

CVE-2021-45954

Dnsmasq 2.86 has a heap-based buffer overflow in extractname called from answerauth and FuzzAuth. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. gfsvggetattributename function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

PT-2021-7716 · Dnsmasq +2 · Dnsmasq +2

Name of the Vulnerable Software and Affected Versions: Dnsmasq affected versions not specified Description: The issue is related to a buffer overflow in the extract name function of the Dnsmasq DNS server. This could allow a remote attacker to access confidential data, compromise its integrity, a...

PT-2021-7713 · Dnsmasq +2 · Dnsmasq +2

Name of the Vulnerable Software and Affected Versions: Dnsmasq affected versions not specified Description: The issue is related to a buffer overflow in the extract name function of the fuzz util.c component of the Dnsmasq DNS server. This could allow a remote attacker to access confidential data...

DEBIAN-CVE-2020-25682

A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. An attacker on the network, who can create valid DNS replies, could use this flaw to cause an overflow with arbitrary...

dnsmasq: heap-based buffer overflow with large memcpy in sort_rrset() when DNSSEC is enabled

A flaw was found in dnsmasq. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote attacker, who can create valid DNS replies, to cause an overflow in a heap-allocated memory. This flaw is caused b...

LiveZilla Live Chat Elevation of Privilege Vulnerability

LiveZilla Live Chat is a free online customer service system from the German company LiveZilla. The system provides real-time monitoring of visitors, offline messages, GeoTracking map tracking, access statistics, online chat and other features. A security vulnerability exists in the 'name' functi...

GNU Recutils Null Pointer Dereference Vulnerability (CNVD-2019-22424)

GNU Recutils is a set of tools and libraries for accessing human-editable plain text databases called recfiles. A null pointer dereference vulnerability exists in the recfieldsetname function in rec-field.c in librec.a in GNU Recutils 1.8. No details of the vulnerability are provided at this time...

krb5: Memory leak caused by supplying a null principal name in request

A memory leak flaw was found in the krb5unparsename function of the MIT Kerberos kadmind service. An authenticated attacker could repeatedly send specially crafted requests to the server, which could cause the server to consume large amounts of memory resources, ultimately leading to a denial of...