in vim/vim

Description Untrusted Pointer Dereference leading to a segmentation fault Segmentation fault in vimregexecmulti at regexp.c:2896 Proof of Concept ./vim -u NONE -X -Z -e -s -S POC1 -c ':qa! POC1https://drive.google.com/file/d/1VOS93VSakO96z2rnvIdWDYRM9KAEIgC/view?usp=sharing bt Program received...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. gfsvggetattributename function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. gfnodegetfield function in GPAC version 1.1.0 is vulnerable to a null pointer dereference, which can be exploited by attackers to cause segmentation errors and application crashes...

gpac 代码问题漏洞

GPAC is an open source multimedia framework. gfsgvrmlmfappend function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. version 1.1.0 of GPAC has a null pointer dereference vulnerability in the BDCheckSFTimeOffset function, which can be exploited by attackers to cause segmentation errors and application crashes...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. version 1.1.0 of GPAC contains a null pointer dereference vulnerability in the dumpodtosaf.isra function, which can be exploited by attackers to cause segmentation errors and application crashes...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. gfnodegettag function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

in michaelrsweet/htmldoc

Description In gifreadimage, in image.cxx, gifreadlzw might return a value greater than 255, which results in an out of bounds read, leading to denial of service. c typedef uchar gifcmapt2563; / ... / static int / I - 0 = success, -1 = failure / gifreadimageFILE fp, / I - Input file / imaget img,...

Security Bulletin: Vulnerabilities in OpenSSL affect multiple N series products

Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. OpenSSL is used by multiple N series products. Multiple N series products have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-1788 DESCRIPTION: OpenSSL is vulnerable to a denial of servic...

MGASA-2021-0544 Updated gmp packages fix security vulnerability

Integer overflow in mpz/inpraw.c and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms...

Updated gmp packages fix security vulnerability

Integer overflow in mpz/inpraw.c and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms...

SUSE SLED15: gmp-devel / gmp-devel-32bit / libgmp10 / libgmp10-32bit / libgmpxx4 / etc (SUSE-SU-2021:3946-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3946-1 advisory. - CVE-2021-43618: Fixed buffer overflow via crafted input in mpz/inpraw.c bsc1192717. Tenable has extracted the preceding description block...

SUSE SLES15: libnetcdf-gnu-hpc / libnetcdf-gnu-mpich-hpc / etc (SUSE-SU-2021:3873-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3873-1 advisory. - Fixed multiple vulnerabilities in ezXML: CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202, CVE-2019-20199, CVE-2019-20200,...

openSUSE 15 Security Update : netcdf (openSUSE-SU-2021:3873-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3873-1 advisory. - An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memo...

Aom 缓冲区错误漏洞

Aom is a next-generation open-source digital media technology for everyone, organized by the Alliance For Open Media USA. A security vulnerability exists in AOM version 2.0.1, which stems from a segmentation violation in the component aomdsp/x86/obmcsadavx2.c. The vulnerability is caused by the...

PT-2021-11924 · Aom · Aom

Name of the Vulnerable Software and Affected Versions: AOM version 2.0.1 Description: The issue is related to a segmentation violation in the component aom dsp/x86/obmc sad avx2.c. Recommendations: For AOM version 2.0.1, consider restricting access to the vulnerable component aom dsp/x86/obmc sad...

This shouldn't have happened: A vulnerability postmortem

Posted by Tavis Ormandy, Project Zero Introduction This is an unusual blog post. I normally write posts to highlight some hidden attack surface or interesting complex vulnerability class. This time, I want to talk about a vulnerability that is neither of those things. The striking thing about thi...

openSUSE 15 Security Update : netcdf (openSUSE-SU-2021:1505-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1505-1 advisory. - An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memo...

GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input leading to a segmentation fault on 32-bit platforms.

...

Oracle Linux 8 : lua (ELSA-2021-4510)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4510 advisory. 5.3.4-12 - Fix segfault in getlocal and setlocal 1880445 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...