SUSE-SU-2021:2808-1 Security update for cpio

This update for cpio fixes the following issues: - A patch previously applied to remedy CVE-2021-38185 introduced a regression that had the potential to cause a segmentation fault in cpio. bsc1189465...

SUSE-SU-2021:14788-1 Security update for cpio

This update for cpio fixes the following issues: - A patch previously applied to remedy CVE-2021-38185 introduced a regression that had the potential to cause a segmentation fault in cpio. bsc1189465...

Libav 缓冲区错误漏洞

Libav is an open source audio and video processing tool that provides cross-platform tools and libraries for converting, manipulating, and streaming various multimedia formats and protocols. vc1decodebmbintfr in vc1block.c in Libav version 12.3 is vulnerable to a segmentation error. An attacker...

PT-2021-10228 · Iec104 · Iec104

Name of the Vulnerable Software and Affected Versions: IEC104 version 1.0 Description: A segmentation violation in the Iec104 Deal FirmUpdate function allows attackers to cause a denial of service. Recommendations: For IEC104 version 1.0, as a temporary workaround, consider disabling the Iec104...

PT-2021-10227 · Iec104 · Iec104

Name of the Vulnerable Software and Affected Versions: IEC104 version 1.0 Description: A segmentation violation in the Iec104 Deal I function allows attackers to cause a denial of service. Recommendations: For IEC104 version 1.0, consider disabling the Iec104 Deal I function as a temporary...

Debian DLA-2746-1 : scrollz - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2746 advisory. An issue has been found in scrollz, an advanced ircII-based IRC client. A crafted CTCP UTC message could allow an attacker to disconnect the victim from an IRC server due t...

Debian: Security Advisory (DLA-2746-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2746-1] scrollz security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2746-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 21, 2021 https://wiki.debian.org/LTS -...

PT-2022-6927 · Mariadb +9 · Mariadb Server +9

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.7 and below Description: The issue is related to a segmentation fault in the Item field::used tables/update depend map for order component of the MariaDB Server. It is associated with the use of the assert function ...

PT-2022-3331 · Mariadb +7 · Mariadb +8

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5 through 10.7 Description: The issue is related to a segmentation fault in the st select lex unit::exclude level component of the MariaDB database management system. This can potentially allow a remote attacker to impact...

Bento4 Denial of Service Vulnerability (CNVD-2023-00385)

Bento4 is an open source C library for reading and writing MP4 files.A denial of service vulnerability exists in versions prior to Bento4 1.6.0-635, which stems from a segmentation error in the write memory access of the product AP4NullTerminatedStringAtom::AP4NllTerminated StringAtom component...

BadAlloc Flaw Affects BlackBerry QNX Used in Millions of Cars and Medical Devices

A major vulnerability affecting older versions of BlackBerry's QNX Real-Time Operating System RTOS could allow malicious actors to cripple and gain control of a variety of products, including cars, medical, and industrial equipment. The shortcoming CVE-2021-22156, CVSS score: 9.0 is part of a...

CVE-2020-23334

A WRITE memory access in the AP4NullTerminatedStringAtom::AP4NullTerminatedStringAtom component of Bento4 version 06c39d9 can lead to a segmentation fault...

CVE-2020-23334

A WRITE memory access in the AP4NullTerminatedStringAtom::AP4NullTerminatedStringAtom component of Bento4 version 06c39d9 can lead to a segmentation fault...

UBUNTU-CVE-2020-23334

A WRITE memory access in the AP4NullTerminatedStringAtom::AP4NullTerminatedStringAtom component of Bento4 version 06c39d9 can lead to a segmentation fault...

Design/Logic Flaw

A WRITE memory access in the AP4NullTerminatedStringAtom::AP4NullTerminatedStringAtom component of Bento4 version 06c39d9 can lead to a segmentation fault...

CVE-2020-23334

A WRITE memory access in the AP4NullTerminatedStringAtom::AP4NullTerminatedStringAtom component of Bento4 version 06c39d9 can lead to a segmentation fault...

CVE-2020-23334

Affected software: Bento4 (open-source C library for MP4 handling). Vulnerable component: AP4_NullTerminatedStringAtom. Root cause: A WRITE memory access in AP4_NullTerminatedStringAtom::AP4_NullTerminatedStringAtom can cause a segmentation fault. Impact: crashes (segmentation fault) reported for...

CVE-2020-23334

A WRITE memory access in the AP4NullTerminatedStringAtom::AP4NullTerminatedStringAtom component of Bento4 version 06c39d9 can lead to a segmentation fault...

Bento4 缓冲区错误漏洞

Bento4 is an open source C library for reading and writing MP4 files.A denial of service vulnerability exists in versions prior to Bento4 1.6.0-635, which stems from a segmentation error in the write memory access of the product AP4NullTerminatedStringAtom::AP4NllTerminated StringAtom component...