CVE-2020-7227

Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters. This affects ifaces-diag.asp, system.as...

Information disclosure

Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters. This affects ifaces-diag.asp, system.as...

PT-2018-3838

Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 0.26.6 libgit2 versions 0.27.x prior to 0.27.4 Description The issue is related to the ng pkt function in the transports/smart pkt.c component of libgit2, which is implemented in C. It involves a buffer data...

CVE-2018-7039

CCN-lite 2.0.0 Beta allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact because the ccnlndntlvprependBlob function in ccnl-pkt-ndntlv.c can be called with wrong arguments. Specifically, there is an incorrect integer data type causing a...

PT-2018-17864

Name of the Vulnerable Software and Affected Versions CCN-lite version 2.0.0 Beta Description The issue allows remote attackers to cause a denial of service or possibly have other unspecified impacts. This is due to the ccnl ndntlv prependBlob function in ccnl-pkt-ndntlv.c being called with...

CVE-2018-7039: Improper Restriction of Operations within the Bounds of a Memory Buffer

CCN-lite 2.0.0 Beta allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact because the ccnlndntlvprependBlob function in ccnl-pkt-ndntlv.c can be called with wrong arguments. Specifically, there is an incorrect integer data type causing a...

Double free

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, concurrent rx notifications and read operations in the G-Link PKT driver can result in a double free condition due to missing locking resulting in listdel and listadd overlapping and...

CVE-2017-9705

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, concurrent rx notifications and read operations in the G-Link PKT driver can result in a double free condition due to missing locking resulting in listdel and listadd overlapping and...

CVE-2017-9705

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, concurrent rx notifications and read operations in the G-Link PKT driver can result in a double free condition due to missing locking resulting in listdel and listadd overlapping and...

CVE-2017-9705

CVE-2017-9705 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel, where the G-Link PKT driver’s concurrent rx notifications and read() operations can trigger a double-free due to missing locking. This can cause list_del() and list_add() to overlap and corru...

CVE-2017-9705: Double Free

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, concurrent rx notifications and read operations in the G-Link PKT driver can result in a double free condition due to missing locking resulting in listdel and listadd overlapping and...

PT-2018-8529

Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to the fixed version Firefox OS for MSM versions prior to the fixed version QRD Android versions prior to the fixed version All Android releases from CAF using the Linux kernel versions prior to the fixed version...

UBUNTU-CVE-2017-7869

GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdkpktread function in opencdk/read-packet.c. This issue which is a subset of the vendor's GNUTLS-SA-2017-3 report is fixed in 3.5.10...

DEBIAN-CVE-2017-6058

Buffer overflow in NetRxPkt::ehdrbuf in hw/net/netrxpkt.c in QEMU aka Quick Emulator, when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service out-of-bounds access and QEMU process crash via vectors related to VLAN stripping...

PT-2017-17963

Name of the Vulnerable Software and Affected Versions GnuTLS versions prior to 3.5.10 Description The issue is caused by an integer overflow and heap-based buffer overflow related to the cdk pkt read function in opencdk/read-packet.c. This is a subset of the vendor's report and has been fixed...

PT-2017-7753

Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 0.24.6 libgit2 versions 0.25.x prior to 0.25.1 Description A buffer overflow issue exists in the git pkt parse line function in transports/smart pkt.c, which is part of the Git Smart Protocol support in libgit2. This...

PT-2016-7153

Name of the Vulnerable Software and Affected Versions QEMU aka Quick Emulator affected versions not specified Description The issue is related to an integer overflow in the net tx pkt init function, which can cause a denial of service. This happens when the maximum fragmentation count triggers an...

Microsoft Windows XP2000 - Internet Protocol Validation Remote Code Execution (1)

Microsoft Windows XP2000 - Internet Protocol Validation Remote Code Execution 1 source: https://www.securityfocus.com/bid/13116/info Microsoft Windows is reported prone to a remote code execution vulnerability. It is reported that the vulnerability manifests when an affected Microsoft platform...

PT-2010-5691

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise kernel-vmipae-debuginfo versions prior to 2.6.36-rc6 SUSE Linux Enterprise kernel-kdumppae-debuginfo versions prior to 2.6.36-rc6 Description The issue is related to multiple vulnerabilities in the Linux kernel,...