1896 matches found
CVE-2019-20423
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields of packets sent by a client. The function targethandleconnect mishandles a certain size value when a client connects to a server, because of an integer...
CVE-2019-20423
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields of packets sent by a client. The function targethandleconnect mishandles a certain size value when a client connects to a server, because of an integer...
CVE-2019-20423
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields of packets sent by a client. The function targethandleconnect mishandles a certain size value when a client connects to a server, because of an integer...
CVE-2019-20427
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation for specific fields of packets sent by a client. Interaction between reqcapsulegetsize and tgtbrwwrite leads to a tgtshortio2pages integer...
CVE-2019-20427
CVE-2019-20427 affects Lustre before version 2.12.3, where the ptlrpc module may overflow buffers and panic, with potential remote code execution due to insufficient validation of certain client packet fields. The root cause is described as an integer signedness error arising from the interaction...
CVE-2019-20427
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation for specific fields of packets sent by a client. Interaction between reqcapsulegetsize and tgtbrwwrite leads to a tgtshortio2pages integer...
PT-2020-10437
Name of the Vulnerable Software and Affected Versions Lustre file system versions prior to 2.12.3 Description The issue arises from a buffer overflow and panic in the ptlrpc module due to the lack of validation for specific fields of packets sent by a client. This occurs because the function targ...
PT-2020-10440
Name of the Vulnerable Software and Affected Versions Lustre file system versions prior to 2.12.3 Description The issue is related to a buffer overflow and panic, and possibly remote code execution, in the ptlrpc module due to the lack of validation for specific fields of packets sent by a client...
CVE-2019-20423: Buffer Copy without Checking Size of Input
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields of packets sent by a client. The function targethandleconnect mishandles a certain size value when a client connects to a server, because of an integer...
CVE-2019-20427: Buffer Copy without Checking Size of Input
In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the lack of validation for specific fields of packets sent by a client. Interaction between reqcapsulegetsize and tgtbrwwrite leads to a tgtshortio2pages integer...
Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2017-1128)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2019-2583)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2019-2521)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-5711
gdgifin.c in the GD Graphics Library aka libgd, as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the imagecreatefromgif or...
CVE-2019-19958
In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...
Integer overflow
In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...
CVE-2019-19958
In CVE-2019-19958, the affected component is libIEC61850 1.4.0, specifically StringUtils_createStringFromBuffer in common/string_utilities.c. A signedness issue in integer handling could allow an under/over-approximation during buffer processing, potentially triggering an excessive memory allocat...
CVE-2019-19958
In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...
PT-2019-16020
Name of the Vulnerable Software and Affected Versions libIEC61850 version 1.4.0 Description The issue is related to an integer signedness problem in the StringUtils createStringFromBuffer function, located in common/string utilities.c. This could potentially lead to an attempted excessive memory...
CVE-2019-19958: Incorrect Conversion between Numeric Types
In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...