kernel: out-of-bound read in memcpy_fromiovecend()

A flaw was found in the Linux kernel that allows the userspace to call memcpyfromiovecend and similar functions with a zero offset and buffer length. This can cause a read beyond the buffer boundaries flaw and, in certain cases, cause a memory access fault and a system halt by accessing invalid...

DEBIAN-CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

ALPINE-CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

IxVeriWave DoS

The vulnerability of the IxVeriWave component, a traffic analysis tool for Wireshark, relates to reading data beyond its intended boundaries. Exploiting this vulnerability can allow a remote attacker to prematurely terminate the application’s operation...

libarchive Heap Buffer Overflow Info Disclosure

The vulnerability of the thereaddatanone function in the libarchive library is related to reading data beyond the allowed boundaries during data extraction. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information through a specially created lha archive...

CVE-2018-16885

A flaw was found in the Linux kernel that allows the userspace to call memcpyfromiovecend and similar functions with a zero offset and buffer length which causes the read beyond the buffer boundaries, in certain cases causing a memory access fault and a system halt by accessing invalid memory...

Linux parse_hid_report_descriptor Heap Buffer Overflow DoS

The vulnerability of the parsehidreportdescriptor function in the Linux kernel’s drivers/input/tablet/gtco.c file arises from a read operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service failures or other effects such as...

Google Chrome Memory Leak

The vulnerability of the browser-based credit card data filling mechanism in Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to read data beyond the memory limit, using a specially crafted HTML page...

CVE-2017-15722

In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough, causing reads beyond the end of the string...

Oniguruma library Information Disclosure

The vulnerability of the matchat function in the Oniguruma library exists due to access control errors. Exploiting this vulnerability could allow a malicious actor to influence the accessibility of information by reading beyond the buffer on the stack during regular expression search operations...

PT-2014-8309 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.17.4 Description: The issue allows local users to cause a denial of service, resulting in a system crash, by reading one byte beyond a /dev/zero page boundary. This is due to a problem in the clear user...