PT-2020-6895

Name of the Vulnerable Software and Affected Versions SQLite versions prior to 3.32.0 Description The issue is related to an integer overflow in the sqlite3 str vappendf function in printf.c, which can be exploited to cause a denial of service. Recommendations For versions prior to 3.32.0, update...

PT-2020-17497

Name of the Vulnerable Software and Affected Versions os str bytes crate versions prior to 2.0.0 Description The issue arises from false expectations about the behavior of char::from u32 unchecked. Specifically, the Windows implementation of the os str bytes crate relied on the behavior of...

PT-2020-2318 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.6.2 Description: The issue is related to a stack-based out-of-bounds write in the mpol parse str function in mm/mempolicy.c due to mishandling of an empty nodelist during mount option parsing. This could...

Python -- multiple vulnerabilities

Python reports: gh-95778: Converting between int and str in bases other than 2 binary, 4, 8 octal, 16 hexadecimal, or 32 such as base 10 decimal now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic...

PT-2020-19256

Name of the Vulnerable Software and Affected Versions mruby version 2.1.0 Description A stack-based buffer overflow issue exists in the mrb str len to dbl function within string.c. Recommendations For mruby version 2.1.0, at the moment, there is no information about a newer version that contains ...

PT-2020-7181

Name of the Vulnerable Software and Affected Versions Plixer International Scrutinizer NetFlow & sFlow Analyzer versions 8.6.2.16204 through 9.0.1.19899 Description Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via the addip parameter to...

EulerOS 2.0 SP8 : oniguruma (EulerOS-SA-2020-1019)

According to the versions of the oniguruma package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.CVE-2019-16163 - An issue was discovered in...

PT-2019-6361

Name of the Vulnerable Software and Affected Versions ezXML versions 0.8.2 through 0.8.6 Description The issue is related to errors in handling pointers in the ezxml str2utf8 and ezxml parse str functions within the ezxml.c component of the ezXML library for parsing XML documents. This can lead t...

PT-2019-5888

Name of the Vulnerable Software and Affected Versions Oniguruma versions prior to 6.9.4 Description The issue is related to a heap-based buffer over-read in the str lower case match function within the Oniguruma library, which is used for regular expression processing. This can potentially allow ...

PT-2019-4286

Name of the Vulnerable Software and Affected Versions Zyxel GS1900 devices with firmware before 2.50AAHH.0C0 Description The issue exists due to the hardcoding of registration data in the sal util str encrypt function of the Zyxel GS1900 series router firmware. This allows a remote attacker to...

PT-2019-14545

Name of the Vulnerable Software and Affected Versions Onigmo versions prior to 6.2.1 Description The issue is related to a NULL pointer dereference in the onig error code to str function due to fetch token in regparse.c. Recommendations For Onigmo versions prior to 6.2.1, update to version 6.2.1 ...

Memcached Buffer Overflow Vulnerability

Memcached is the United States Brad Fitzpatrick Brad Fitzpatrick software developers of a high-performance distributed memory object caching system. The system by caching data and objects in memory to reduce the number of times to read the database , thus improving the speed of access to the site...

PT-2019-4903

Name of the Vulnerable Software and Affected Versions memcached version 1.5.16 Description The issue is related to a stack-based buffer over-read in the conn to str function in memcached.c. This can be exploited by a remote attacker to cause a denial of service. Recommendations For memcached...

opensc: Buffer overflow handling string concatention in tools/util.c:util_acl_to_str()

A buffer overflow when handling string concatenation in utilacltostr in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

PT-2019-11499

Name of the Vulnerable Software and Affected Versions: yaml-rust versions 0.4.0 and earlier Description: The issue is related to uncontrolled recursion, which can lead to a denial of service due to an impossible to catch abort. This occurs when the YamlLoader::load from str function is used to...

CVE-2018-1000810

A buffer overflow vulnerability was discovered in Rust that affects the str::repeat function in the standard library. An attacker could abuse this flaw by controlling the arguments given to str::repeat and can cause a Rust program to overflow a buffer in memory, potentially leading to a crash or...

PT-2018-3689

Name of the Vulnerable Software and Affected Versions PHP-Proxy version 5.1.0 Description The issue is related to the str rot pass function in PHP-Proxy, which uses weak cryptography. This weakness makes it easier for attackers to calculate the authorization data needed for local file inclusion...

DEBIAN-CVE-2018-1000810

The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat,...

CVE-2018-1000810

The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat,...

CVE-2018-1000810

The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat,...