4216 matches found
DEBIAN-CVE-2021-3588
The clifeatreadcb function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading...
UBUNTU-CVE-2021-3588
The clifeatreadcb function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading...
CVE-2021-3588
The clifeatreadcb function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading...
BlueZ 缓冲区错误漏洞
BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layers and protocols. BlueZ suffers from a buffer overflow vulnerability that stems from the clifeatreadcb function in src/gatt-database.c failing to perform a bounds check on the...
CVE-2021-22550: Use of Out-of-range Pointer Offset
An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3 or git commit https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd29b0deb2871d31c...
CVE-2021-22549: Use of Out-of-range Pointer Offset
An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c...
ALPINE-CVE-2021-28678
An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads after jumping to file offsets returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data...
DEBIAN-CVE-2021-28678
An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads after jumping to file offsets returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data...
CVE-2021-28678
An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads after jumping to file offsets returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data...
UVI-2021-1000054 tools/power turbostat: Fix offset overflow issue in index converting
tools/power turbostat: Fix offset overflow issue in index converting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...
GSD-2021-1000132 tools/power turbostat: Fix offset overflow issue in index converting
tools/power turbostat: Fix offset overflow issue in index converting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by commit...
GSD-2021-1000054 tools/power turbostat: Fix offset overflow issue in index converting
tools/power turbostat: Fix offset overflow issue in index converting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...
PT-2021-28521
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.3 Description The issue concerns an offset overflow in index converting within the power turbostat tool. This problem was introduced in version v5.10 and is fixed in version v5.12.3. The actual impact...
PT-2021-28563
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.11.19 Description The issue is related to an offset overflow in index converting in the power turbostat tool. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2021-24569
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.11.20 Description: The issue is related to an offset overflow in index converting in the power turbostat tool. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
WS-2021-0270
Linux/Kernel in versions v5.12-rc1-dontuse to v5.12.2 is vulnerable to offset overflow issue in index converting...
PT-2021-24527
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.12.3 Description: The issue concerns an offset overflow in index converting within the power turbostat tool. This problem was introduced in version v5.10 and is fixed in version v5.12.3. The actual impac...
PT-2021-24605
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.35 Description The issue is related to an offset overflow in index converting in the power turbostat tool. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2021-28599
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.35 Description The issue is related to an offset overflow in index converting in the power turbostat tool. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...