CVE-2021-21281: Buffer Copy without Checking Size of Input

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. A buffer overflow vulnerability exists in Contiki-NG versions prior to 4.6. After establishing a TCP socket using the tcp-socket library, it is possible for the remote end to send a packet with a data...

PT-2021-14387

Name of the Vulnerable Software and Affected Versions: Contiki-NG versions prior to 4.6 Description: A buffer overflow issue exists in Contiki-NG, an open-source operating system for internet of things devices. After establishing a TCP socket using the tcp-socket library, a remote endpoint can se...

Information Disclosure

bluez is vulnerable to information disclosure. The clifeatreadcb function in src/gatt-database.c does not perform bounds checks on the offset variable before using it as an index into an array for reading...

GLPI 9.4.5 - Remote Code Execution (RCE)

Exploit Title: GLPI 9.4.5 - Remote Code Execution RCE Exploit Author: Brian Peters Vendor Homepage: https://glpi-project.org Software Link: https://github.com/glpi-project/glpi/releases Version: | grep "CREATE TABLE" | grep -n wifinetworks Update the offsettable value with this number in the...

DEBIAN-CVE-2021-3588

The clifeatreadcb function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading...

UBUNTU-CVE-2021-3588

The clifeatreadcb function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading...

CVE-2021-3588

The clifeatreadcb function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading...

BlueZ 缓冲区错误漏洞

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layers and protocols. BlueZ suffers from a buffer overflow vulnerability that stems from the clifeatreadcb function in src/gatt-database.c failing to perform a bounds check on the...

CVE-2021-22549: Use of Out-of-range Pointer Offset

An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c...

CVE-2021-22550: Use of Out-of-range Pointer Offset

An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3 or git commit https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd29b0deb2871d31c...

DEBIAN-CVE-2021-28678

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads after jumping to file offsets returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data...

ALPINE-CVE-2021-28678

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads after jumping to file offsets returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data...

CVE-2021-28678

An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads after jumping to file offsets returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data...

GSD-2021-1000132 tools/power turbostat: Fix offset overflow issue in index converting

tools/power turbostat: Fix offset overflow issue in index converting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by commit...

UVI-2021-1000054 tools/power turbostat: Fix offset overflow issue in index converting

tools/power turbostat: Fix offset overflow issue in index converting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

GSD-2021-1000054 tools/power turbostat: Fix offset overflow issue in index converting

tools/power turbostat: Fix offset overflow issue in index converting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

PT-2021-24569

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.11.20 Description: The issue is related to an offset overflow in index converting in the power turbostat tool. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-28563

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.11.19 Description The issue is related to an offset overflow in index converting in the power turbostat tool. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-28521

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.3 Description The issue concerns an offset overflow in index converting within the power turbostat tool. This problem was introduced in version v5.10 and is fixed in version v5.12.3. The actual impact...

PT-2021-24605

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.35 Description The issue is related to an offset overflow in index converting in the power turbostat tool. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...