60 matches found
The vulnerability of the `jmem_pools_collect_empty` function in the `jmem-poolman.c` component of the JavaScript Internet of Things engine JerryScript and the IoT.js platform, related to out-of-buffer writing, allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the jmempoolscollectempty function in the jmem-poolman.c component of the JavaScript Internet of Things engine, JerryScript, and the IoT.js platform is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to gain access to sensitive data,...
The vulnerability of the `caca_resize` function in the library for converting images into ASCII art in libcaca involves an out-of-buffer operation. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the cacaresize function in the library that converts images into ASCII art in libcaca is related to the output of the operation outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and ev...
The vulnerability of the DB2 Management Service, a database management system from IBM DB2, allows a hacker to cause a service failure.
The vulnerability of the DB2 Management Service, a database management system from IBM DB2, relates to operations that occur outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the web server of industrial switches SCALANCE X-200, SCALANCE X-200IRT, and SCALANCE X-300 arises from the possibility of executing operations outside the buffer in memory, allowing a perpetrator to execute arbitrary code.
The vulnerability of the web server of industrial switches SCALANCE X-200, SCALANCE X-200IRT, and SCALANCE X-300 lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a...
The vulnerability of Intel Ethernet E810 controller’s microprogramming software, related to the operation of writing data outside the buffer in memory, allows a intruder to trigger a service failure.
The vulnerability of Intel Ethernet E810 controller’s microprogramming software is related to the operation of data out of the buffer boundaries into memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Medium: php71, php72, php73
Issue Overview: Function iconvmimedecodeheaders in PHP may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.CVE-2019-11039 When using gdImageCreateFromXbm function of PHP gd extension, it is possible to supply data that...
CVE-2019-11039
Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...
CVE-2019-11039
Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...
Integer overflow
Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...
CVE-2018-11949
Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD...
CVE-2018-11949
CVE-2018-11949 describes a failure to initialize an extra buffer that can lead to an out-of-bounds access in the WLAN function of Qualcomm Snapdragon components (WLAN HOST) across multiple Snapdragon family devices. The affected scope includes Snapdragon Auto, Compute, Consumer IOT, Industrial IO...
[slackware-security] curl
New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.62.0-i586-1slack14.2.txz: Upgraded. This release fixes the following security issues: SASL password overflow via...
Security fix for the ALT Linux 8 package curl version 7.62.0-alt1
Oct. 31, 2018 Anton Farygin 7.62.0-alt1 - 7.62.0 - fixes: CVE-2018-16839 - buffer overrun in the SASL authentication code. CVE-2018-16840 - use-after-free in handle close CVE-2018-16842 - warning message out-of-buffer read...
curl -- multiple vulnerabilities
curl security problems: CVE-2018-16839: SASL password overflow via integer overflow libcurl contains a buffer overrun in the SASL authentication code. The internal function Curlauthcreateplainmessage fails to correctly verify that the passed in lengths for name and password aren't too long, then...
The vulnerability of Qualcomm SafeSwitch in the Android operating system allows a hacker to compromise the privacy, integrity, and accessibility of the protected information.
The vulnerability of Qualcomm SafeSwitch in the Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
[ASA-201805-16] lib32-libcurl-gnutls: multiple issues
Arch Linux Security Advisory ASA-201805-16 ========================================== Severity: Critical Date : 2018-05-18 CVE-ID : CVE-2018-1000300 CVE-2018-1000301 Package : lib32-libcurl-gnutls Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-697 Summary ======= Th...
Buffer under-read in String#unpack
Stringunpack receives format specifiers as its parameter, and can be specified the position of parsing the data by the specifier @. If a big number is passed with @, the number is treated as the negative value, and out-of-buffer read is occurred. So, if a script accepts an external input as the...
FreeBSD : cURL -- Multiple vulnerabilities (301a01b7-d50e-11e7-ac58-b499baebfeaf)
The cURL project reports : - NTLM buffer overflow via integer overflow CVE-2017-8816libcurl contains a buffer overrun flaw in the NTLM authentication code. The internal function Curlntlmcoremkntlmv2hash sums up the lengths of the user name + password = SUM and multiplies the sum by two = SIZE to...
CURL-CVE-2017-8818 SSL out of buffer access
libcurl contains an out boundary access flaw in SSL related code. When allocating memory for a connection the internal struct called connectdata, a certain amount of memory is allocated at the end of the struct to be used for SSL related structs. Those structs are used by the particular SSL libra...
