EUVD-2021-25931

Malware in sbrugna...

CVE-2021-39583

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function poollookupstring2 located in pool.c. It allows an attacker to cause Denial of Service...

CVE-2021-39592

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function poollookupuint located in pool.c. It allows an attacker to cause Denial of Service...

CVE-2021-39583

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function poollookupstring2 located in pool.c. It allows an attacker to cause Denial of Service...

CVE-2021-39584

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function namespacesethash located in pool.c. It allows an attacker to cause Denial of Service...

Heap overflow

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function poolread located in pool.c. It allows an attacker to cause code Execution...

CVE-2021-39574

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function poolread located in pool.c. It allows an attacker to cause code Execution...

UBUNTU-CVE-2021-39583

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function poollookupstring2 located in pool.c. It allows an attacker to cause Denial of Service...

Null pointer dereference

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function poollookupuint located in pool.c. It allows an attacker to cause Denial of Service...

UBUNTU-CVE-2021-39574

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function poolread located in pool.c. It allows an attacker to cause code Execution...

Null pointer dereference

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function poollookupstring2 located in pool.c. It allows an attacker to cause Denial of Service...

UBUNTU-CVE-2021-39584

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function namespacesethash located in pool.c. It allows an attacker to cause Denial of Service...

CVE-2021-39592

Removed by vendor...

CVE-2021-39584

Removed by vendor...

CVE-2021-39584

CVE-2021-39584 affects swftools (up to 20200710) with a NULL pointer dereference in pool.c in namespace_set_hash(), enabling a Denial of Service. The provided connected documents confirm the vulnerable component and root cause but do not supply exploit details, affected versions beyond the specif...

Remote code execution

In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in allocpool in pool.c, and possible remote code execution...

CVE-2020-9273

In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in allocpool in pool.c, and possible remote code execution...

CVE-2020-9273

In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in allocpool in pool.c, and possible remote code execution...