CVE-2021-33881

CVE-2021-33881 affects NXP MIFARE Ultralight and NTAG RFID cards. The issue allows an attacker to interrupt a write operation (a “tear off”/rip-off attack) to bypass the monotonic counter protection mechanism. Impact depends on usage of the anti tear-off feature in specific applications, such as ...

CVE-2021-33881

On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation aka conduct a "tear off" attack over RFID to bypass a Monotonic Counter protection mechanism. The impact depends on how the anti tear-off feature is used in specific applications such as public transportation,...

CVE-2021-33881: Incorrect Authorization

On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation aka conduct a "tear off" attack over RFID to bypass a Monotonic Counter protection mechanism. The impact depends on how the anti tear-off feature is used in specific applications such as public transportation,...

PT-2021-20348

Name of the Vulnerable Software and Affected Versions: NXP MIFARE Ultralight and NTAG cards affected versions not specified Description: The issue allows an attacker to interrupt a write operation, also known as a "tear off" attack, over RFID. This can bypass a Monotonic Counter protection...

nginx ngx_resolver_copy() Code Execution

The vulnerability of the ngxresolvercopy function in the nginx server is related to a single-byte offset error during the writing of the point symbol '.', 0x2E beyond the buffer limit. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by sending...

Debian DLA-2670-1 : nginx security update

Luis Merino, Markus Vervier and Eric Sesterhenn discovered an off-by-one in Nginx, a high-performance web and reverse proxy server, which could result in denial of service and potentially the execution of arbitrary code. For Debian 9 stretch, this problem has been fixed in version 1.10.3-1+deb9u6...

Debian DSA-4921-1 : nginx - security update

Luis Merino, Markus Vervier and Eric Sesterhenn discovered an off-by-one in Nginx, a high-performance web and reverse proxy server, which could result in denial of service and potentially the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

CVE-2021-23017: Off-by-one Error

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

PT-2021-24746

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.12.3 Description The issue is related to a fix for an off-by-one error in the hdmi 14 process transaction function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-28841

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue is related to a fix for an off-by-one error in the hdmi 14 process transaction function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-24847

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue is related to a fix for an off-by-one error in the hdmi 14 process transaction function. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2021-28740

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.12.3 Description The issue is related to a fix for an off-by-one error in the hdmi 14 process transaction function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

[SECURITY] [DLA 2670-1] nginx security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2670-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta May 30, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

CVE-2021-33564

An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features...

in mcfriend99/bird

✍️ Description Heap-based 1-byte write violation. Certain programs can cause the parser/syntax-checker to write out of bounds. The below program writes a single byte out of bounds. 🕵️‍♂️ Proof of Concept Program: var a = 'outer' def test var a = 'inner' echo 'It works! $a' echo a echo test test def...

Debian: Security Advisory (DSA-4921-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Remote Code Execution

nginx is vulnerable to remote code execution. A remote attacker who is able to provide DNS responses to a nginx server can likely achieve remote code execution due to an off-by-one error in ngxresolvercopy while processing DNS responses...

[SECURITY] [DSA 4921-1] nginx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4921-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 28, 2021 https://www.debian.org/security/faq -...

Johnson Controls Sensormatic Electronics VideoEdge

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Sensormatic Electronics, LLC, a subsidiary of Johnson Controls Equipment: VideoEdge Vulnerability: Off-by-one Error 2. RISK EVALUATION Under specific circumstances, a local authenticated user may be able to exploit this...

nginx 1.20.0 DNS Resolver Off-By-One Heap Write Exploit

An off-by-one error in ngxresolvercopy while processing DNS responses allows a network attacker to write a dot character '.', 0x2E out of bounds in a heap allocated buffer. The vulnerability can be triggered by a DNS response in reply to a DNS request from nginx when the resolver primitive is...