13092 matches found
DLA-2874-1 thunderbird - security update
Bulletin has no description...
CVE-2021-45940
libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 4 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...
CVE-2021-45937
wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientConnect...
PUB-A-199579676
Bulletin has no description...
ASB-A-202025599
Bulletin has no description...
ASB-A-192663648
In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-193070555
Bulletin has no description...
ASB-A-193070594
Bulletin has no description...
ASB-A-193070342
Bulletin has no description...
ASB-A-193071116
Bulletin has no description...
OSV-2021-1787 Global-buffer-overflow in stbi__jpeg_decode_block
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43113 Crash type: Global-buffer-overflow READ 4 Crash state: stbijpegdecodeblock stbidecodejpegimage stbijpegload...
GSD-2021-1002813 f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
f2fs: fix to do sanity check on last xattr entry in f2fssetxattr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.89 by commit...
GSD-2021-1002808 platform/x86: intel_pmc_core: fix memleak on registration failure
platform/x86: intelpmccore: fix memleak on registration failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.89 by commit...
GSD-2021-1002800 f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
f2fs: fix to do sanity check on last xattr entry in f2fssetxattr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.169 by commit...
DLA-2865-1 resiprocate - security update
Bulletin has no description...
CVE-2021-42583
A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the exposure of sensitive information...
Denial Of Service (DoS)
rpki is vulnerable to denial of service. The vulnerability exists due to the lack of sanitization of the number of child CA it can create allowing an attacker create a chain of CAs of de-facto infinite length crashing the system...
Remote Code Execution (RCE)
gerapy is vulnerable to remote code execution. Insecure loading of projectconfigure function allows an attacker to execute arbitrary code embedded in view file...
CVE-2021-45909
An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function. It allows an attacker to write a large amount of arbitrary data outside the boundaries of a buffer...