172 matches found
UBUNTU-CVE-2020-11049
In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bound read of client memory that is then passed on to the protocol parser. This has been patched in 2.0.0...
Out-of-bounds
In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bound read of client memory that is then passed on to the protocol parser. This has been patched in 2.0.0...
CVE-2020-11049: Out-of-bounds Read
In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bound read of client memory that is then passed on to the protocol parser. This has been patched in 2.0.0...
CVE-2020-11049 Out-of-bounds Read in FreeRDPrdp_read_share_control_header
In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bound read of client memory that is then passed on to the protocol parser. This has been patched in 2.0.0...
CVE-2020-11049
CVE-2020-11049 : In FreeRDP, there is an out-of-bounds read of client memory that is then passed on to the protocol parser. This vulnerability affects FreeRDP releases prior to the patch and has been explicitly fixed in version 2.0.0. The available documents describe the issue as an OOB read in t...
PT-2020-12510 · Freerdp +6 · Freerdp +6
Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.1 through 1.9 Description: The issue involves an out-of-bound read of client memory that is then passed on to the protocol parser. This has been patched in version 2.0.0. Recommendations: For versions 1.1 through 1.9, updat...
dovecot security and bug fix update
1:2.2.36-6 - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes 1741787 1:2.2.36-5 - fix CVE-2019-3814: improper certificate validation 1674369 - fix CVE-2019-7524: buffer overflow in...
Tcpdump BGP parser override vulnerability
tcpdump is a message analysis tool. Tcpdump BGP parser print-bgp.c:bgpattrprint suffers from an out-of-bounds read vulnerability, which can be exploited by a remote attacker to submit a special request that can crash the application...
dovecot security update
1:2.2.36-5.1 - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes 1741788...
PT-2019-12681
Name of the Vulnerable Software and Affected Versions Zeek Network Security Monitor versions prior to 2.6.2 Description A NULL pointer dereference in the Kerberos protocol parser can lead to a denial of service DoS due to a mishandled case-type index. Recommendations For versions prior to 2.6.2,...
Wireshark Denial of Service Vulnerability (CNVD-2019-12362)
Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial-of-service vulnerability exists in the MS-WSP protocol parser in Wireshark, whi...
CVE-2018-16807
In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser...
UBUNTU-CVE-2018-16807
In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser...
CVE-2018-16807
Removed by vendor...
CVE-2018-16807
CVE-2018-16807 affects Bro/Zeek (Kerberos protocol parser) through version 2.5.5, where a memory leak could lead to denial of service. The root cause is a memory leak in scripts/base/protocols/krb/main.bro within the Kerberos parser. Impact is described as potential DoS, with availability potenti...
CVE-2018-16807: Missing Release of Resource after Effective Lifetime
In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser...
ALPINE-CVE-2018-7159
The HTTP parser in all current versions of Node.js ignores spaces in the Content-Length header, allowing input such as Content-Length: 1 2 to be interpreted as having a value of 12. The HTTP specification does not allow for spaces in the Content-Length value and the Node.js HTTP parser has been...
tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser
The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootpprint...