2021-07 Cumulative Update for Windows Server, version 20H2 for x64-based Systems (KB5004945)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

PT-2024-11344

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs when mda resolve route is called more than once on the same rdma cm id. This can happen if cma query handler triggers the RDMA CM EVENT ROUTE ERROR flow, which puts...

libyang: invalid memory access in resolve_feature_value() when a if-feature is used inside a bit

An invalid memory access flaw occurs in libyang in the function resolvefeaturevalue when an if-feature statement is used inside a bit. Applications that use libyang to process untrusted input YANG files may crash...

CVE-2020-23915

An issue was discovered in cpp-peglib through v0.1.12. peg::resolveescapesequence in peglib.h has a heap-based buffer over-read...

PT-2021-10984 · Unknown +1 · Cpp-Peglib +1

Name of the Vulnerable Software and Affected Versions: cpp-peglib versions prior to 0.1.13 Description: An issue was discovered in the peg::resolve escape sequence function, located in peglib.h, which has a heap-based buffer over-read. Recommendations: For versions prior to 0.1.13, update to...

Out-of-bounds Read

A heap-based buffer over-read was discovered in cpp-peglib's peg::resolveescapesequence in peglib.h...

2021-04 Cumulative Update for Windows 10 Version 2004 for x86-based Systems (KB5001330)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2021-04 Cumulative Update for Windows 10 Version 20H2 for x64-based Systems (KB5001330)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

Linux kernel 安全漏洞

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in Linux kernel versions prior to 5.11.11. The vulnerability stems from the...

The vulnerability of the QPDF::resolveObjectsInStream function in the command-line utility for converting QPDF documents allows a attacker to cause a service failure due to infinite loop execution.

The vulnerability of the QPDF::resolveObjectsInStream function in the command-line PDF conversion tool is related to the infinite loop that can occur during execution. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the QPDFTokenizer::resolveLiteral function in the command-line utility for converting QPDF documents allows a attacker to cause a service failure.

The vulnerability of the QPDFTokenizer::resolveLiteral function in the command-line PDF conversion utility for QPDF documents involves infinite loop execution. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the QPDFTokenizer::resolveLiteral function in the command-line utility for converting QPDF documents allows a attacker to cause a service failure.

The vulnerability of the QPDFTokenizer::resolveLiteral command-line utility for converting QPDF documents is related to the infinite loop that can occur during execution. Exploiting this vulnerability could allow an attacker to cause service interruptions...

2021-03 Cumulative Update for Windows Server, version 2004 for ARM64-based Systems (KB5000802)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2021-03 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB5000802)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2021-03 Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB5000802)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

OSV-2021-508 Segv on unknown address in Sass::CompoundSelector::resolve_parent_refs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31832 Crash type: Segv on unknown address Crash state: Sass::CompoundSelector::resolveparentrefs Sass::ComplexSelector::resolveparentrefs Sass::SelectorList::resolveparentrefs...

2021-02 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB5001028)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

GHSA-PMW4-JGXX-PCQ9 File System Bounds Escape

Impact Clients of FTP servers utilizing ftp-srv hosted on Windows machines can escape the FTP user's defined root folder using the expected FTP commands, for example, CWD and UPDR. Background When windows separators exist within the path , path.resolve leaves the upper pointers intact and allows...

CVE-2020-26299 File System Bounds Escape

ftp-srv is an open-source FTP server designed to be simple yet configurable. In ftp-srv before version 4.4.0 there is a path-traversal vulnerability. Clients of FTP servers utilizing ftp-srv hosted on Windows machines can escape the FTP user's defined root folder using the expected FTP commands,...

2021-02 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB4601315)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...