9995 matches found
OESA-2023-1665 skopeo security update
A command line utility that performs various operations on container images and image repositories Security Fixes: Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.CVE-2023-24537...
OESA-2023-1662 skopeo security update
A command line utility that performs various operations on container images and image repositories Security Fixes: Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.CVE-2023-24537...
CVE-2023-43669
The Tungstenite crate before 0.20.1 for Rust allows remote attackers to cause a denial of service minutes of CPU consumption via an excessive length of an HTTP header in a client handshake. The length affects both how many times a parse is attempted e.g., thousands of times and the average amount...
C-ares Heap Buffer Overflow DoS
The vulnerability of the aresparsesoareply function in the C-ares library related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
CVE-2023-43669
The Tungstenite crate before 0.20.1 for Rust allows remote attackers to cause a denial of service minutes of CPU consumption via an excessive length of an HTTP header in a client handshake. The length affects both how many times a parse is attempted e.g., thousands of times and the average amount...
GPAC multimedia platform Heap Buffer Overflow DoS
The vulnerability of the aviparseinputfile function mediatools/avilib.c:2083 in the multimedia platform GPAC is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure...
GPAC MPEG12_ParseSeqHdr Buffer Overflow DoS
The vulnerability of the MPEG12ParseSeqHdr function mediatools/mpeg2ps.c in the GPAC multimedia platform is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...
GNU Binutils parse_module Buffer Overflow DoS
The vulnerability of the parsemodule function in the GNU Binutils development environment is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure or exert other adverse effects...
GNU Binutils Buffer Overflow
The vulnerability of the bfdpefparsefunctionstubs function in the GNU Binutils development toolset, located in the bfd/pef.c file, is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to trigger a stack overflow...
GNU Binutils Development Environment Memory Leak DoS
The vulnerability of the parsestabstructfields function in the GNU development environment is related to a memory release error. Exploiting this vulnerability could allow an attacker to cause a service failure...
GNU Binutils Buffer Overflow DoS
The vulnerability of the bfdpefparsefunctionstubs function bfd/pef.c in the GNU Binutils development environment is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2023-25584
An out-of-bounds read flaw was found in the parsemodule function in bfd/vms-alpha.c in Binutils...
DEBIAN-CVE-2023-25584
An out-of-bounds read flaw was found in the parsemodule function in bfd/vms-alpha.c in Binutils...
CVE-2023-25584 Out of bounds read in parse_module function in bfd/vms-alpha.c
An out-of-bounds read flaw was found in the parsemodule function in bfd/vms-alpha.c in Binutils...
Input validation
NLnet Labs’ Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects. This is due to insufficient input checking in the bcder library covered by CVE-2023-39914...
[SECURITY] Fedora 37 Update: libeconf-0.5.2-1.fc37
libeconf is a highly flexible and configurable library to parse and manage key=3Dvalue configuration files. It reads configuration file snippets from different directories and builds the final configuration file from it...
PT-2023-36008 · Git +1 · Libavc
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a null-dereference read crash. Technical details about the crash include the functions isvcd parse inter slice data cavlc enh lyr...
Denial Of Service (DoS)
tcpreplay is vulnerable to Denial Of Service DoS. The vulnerability exists in the parse endpoint function of the library, which allows an attacker to cause an application by providing a maliciously crafted input...
GHSA-RR66-QH5M-W6MX hutool Buffer Overflow vulnerability
hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse...
PT-2023-36002 · Git +1 · Kamailio
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as parse priv value and parse privacy, which are located in...