CVE-2020-27793

An off-by-one overflow flaw was found in radare2 due to mismatched array length in corejava.c. This could allow an attacker to cause a crash, and perform a denail of service attack...

UBUNTU-CVE-2020-27793

An off-by-one overflow flaw was found in radare2 due to mismatched array length in corejava.c. This could allow an attacker to cause a crash, and perform a denail of service attack...

CVE-2020-27793

CVE-2020-27793 concerns radare2, due to an off-by-one overflow from a mismatched array length in core_java.c. The flaw can cause a crash and enable a denial-of-service condition. The NVD entry lists a CVSSv3.1 base score of 7.5 ( HIGH ) with network attack vector, low complexity, no privileges re...

CVE-2020-27793

An off-by-one overflow flaw was found in radare2 due to mismatched array length in corejava.c. This could allow an attacker to cause a crash, and perform a denail of service attack...

CVE-2020-27793

An off-by-one overflow flaw was found in radare2 due to mismatched array length in corejava.c. This could allow an attacker to cause a crash, and perform a denail of service attack...

OESA-2022-1851 squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: An issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI...

CVE-2022-30216 - Authentication coercion of the Windows ?Server? service

In this blog, see how an off-by-one error could lead to domain controller access in Microsoft Server Service...

CVE-2022-30216 - Authentication coercion of the Windows “Server” service

In this blog, see how an off-by-one error could lead to domain controller access in Microsoft Server Service...

Denial Of Service (DoS)

rtl-433 is vulnerable to denial of service. The vulnerability exists due to an Off-by-one Error occurs in cmr113decode of rtl433 21.12 when decoding a maliciously crafted file which allows an attacker to crash the application via malicious input...

Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar SIEM has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2022-23218 DESCRIPTION: GNU C Library aka glibc is vulnerable to a stack-based...

PT-2022-24287 · Systemd +9 · Systemd +9

Name of the Vulnerable Software and Affected Versions: Systemd affected versions not specified Description: An off-by-one Error issue was discovered in the format timespan function of time-util.c. An attacker could supply specific values for time and accuracy that lead to a buffer overrun in form...

Exploit for Off-by-one Error in F5 Nginx

CVE-2021-23017-PoC pip install -r requirements.txt pytho...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156: Heap-Based Buffer Overflow in Sudo Baron Samed...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Root shell PoC for CVE-2021-3156 no brutef...

Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2022-1598)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.1 : qemu (EulerOS-SA-2022-1598)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue...

EulerOS Virtualization 2.9.0 : qemu (EulerOS-SA-2022-1621)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue...

GSD-2022-1002190 drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()

drm/amdgpu: fix off by one in amdgpugfxkiqacquire This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1001777 drm/dp: Fix off-by-one in register cache size

drm/dp: Fix off-by-one in register cache size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001702 drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()

drm/amdgpu: fix off by one in amdgpugfxkiqacquire This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...