Lucene search
+L

161 matches found

AlpineLinux
AlpineLinux
added 2021/10/14 5:1 a.m.73 views

CVE-2021-42341

checkpath in OpenRC before 0.44.7 uses the direct output of strlen to allocate strings, which does not account for the '\0' byte at the end of the string. This results in memory corruption. CVE-2021-42341 was introduced in git commit 63db2d99e730547339d1bdd28e8437999c380cae, which was introduced ...

7.5CVSS7.5AI score0.02117EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.10 views

The vulnerability of the strlen function in the fs/nfsd/trace.h component of the Linux operating system, which involves reading data beyond the allowed buffer limits, allows a hacker to cause a service failure.

The vulnerability of the strlen function in the fs/nfsd/trace.h component of the Linux operating system is related to reading data from buffer beyond its allowable limits. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS6.8AI score0.0319EPSS
SaveExploits0References10Affected Software2
NVD
NVD
added 2021/08/08 8:15 p.m.23 views

CVE-2021-38202

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service out-of-bounds read in strlen by sending NFS traffic when the trace event framework is being used for nfsd...

7.5CVSS0.0319EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/08/08 8:15 p.m.7 views

CVE-2021-38202

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service out-of-bounds read in strlen by sending NFS traffic when the trace event framework is being used for nfsd...

7.5CVSS6.8AI score0.0319EPSS
SaveExploits0References4
OSV
OSV
added 2021/08/08 8:15 p.m.10 views

UBUNTU-CVE-2021-38202

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service out-of-bounds read in strlen by sending NFS traffic when the trace event framework is being used for nfsd...

7.5CVSS6.7AI score0.0319EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2021/08/08 7:25 p.m.35 views

CVE-2021-38202

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service out-of-bounds read in strlen by sending NFS traffic when the trace event framework is being used for nfsd...

7.3AI score0.0319EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/08/08 12:0 a.m.14 views

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel suffers from a denial of service vulnerability that is caused by an out-of-bounds read flaw in strlen in fs/nfsd/trace.h. A remote attacker can exploit this vulnerability to cause a denial o...

7.5CVSS6.7AI score0.0319EPSS
SaveExploits0References6
Hacker One
Hacker One
added 2021/03/10 11:6 p.m.149 views

GitHub Security Lab: ihsinme: CPP add query for CWE-788 Access of memory location after the end of a buffer using strlen.

This bug was reported directly to GitHub Security Lab...

1.5AI score
SaveExploits0
NVD
NVD
added 2019/12/31 9:15 p.m.24 views

CVE-2019-20199

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while running strlen on a NULL pointer...

6.5CVSS6.6AI score0.01085EPSS
SaveExploits1References1
Prion
Prion
added 2019/12/31 9:15 p.m.13 views

Null pointer dereference

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmldecode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while running strlen on a NULL pointer...

4.3CVSS6.4AI score0.01085EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2019/11/07 5:7 p.m.55 views

CVE-2011-2337

The CVE-2011-2337 entry concerns WebKit in Google Chrome (pre-Blink M12) on 64-bit platforms, where a return value from strlen uses the wrong type. The Connected documents reiterate this same issue across multiple sources, without providing concrete exploit details, impacted versions beyond the C...

9.8CVSS9.1AI score0.00809EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/23 12:0 a.m.7 views

The vulnerability of the __strlen_sse2_pminub function in the infotocap utility from the ncurses-bin package allows a hacker to induce a service failure.

The vulnerability of the strlensse2pminub function located in the file sysdeps/x8664/multiarch/strlen-sse2-pminub.S:50 in the infotocap utility from the ncurses-bin package is related to errors in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a system failure ...

6.2CVSS5.5AI score
SaveExploits0Affected Software1
CNVD
CNVD
added 2018/07/05 12:0 a.m.5 views

Memory Corruption Vulnerability in NAPro

Nanda Aotuo Technology Jiangsu Co., Ltd. specializes in the research, development, production and sales of programmable logic controllers PLC, has formed a large and medium-sized PLC products as the main products, supplemented by small PLC products, remote measurement and control unit RTU, touch...

7.1AI score
SaveExploits0
OSV
OSV
added 2018/01/16 9:29 a.m.31 views

CVE-2018-5710

An issue was discovered in MIT Kerberos 5 aka krb5 through 1.16. The pre-defined function "strlen" is getting a "NULL" string as a parameter value in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c in the Key Distribution Center KDC, which allows remote authenticated users to cause a denial of servi...

6.5CVSS6.7AI score
SaveExploits0References1
zdt
zdt
added 2018/01/12 12:0 a.m.24 views

Linux/ARM - execve (/bin/sh,NULL,0) Shellcode (31 bytes)

/ Title: Linux/ARM - execve"/bin/sh",NULL,0 - 31 bytes Date: 2010-08-31 Tested: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan - twitter: @jonathansalwan shell-storm.org Shellcode ARM without 0x20, 0x0a and 0x00 00008054 : 8054: e28f3001 add r3, pc, 1 ; 0x1 8058: e12fff13 bx r3 805c: 4678 mov r0, p...

7.4AI score
SaveExploits0
OSV
OSV
added 2017/10/31 9:29 p.m.7 views

ALPINE-CVE-2017-1000257

An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that non-existing data with a pointer and the size zero to the deliver-data function. libcurl's deliver-data function treats zero as a mag...

9.1CVSS7AI score0.06224EPSS
SaveExploits0References1
Prion
Prion
added 2017/10/31 9:29 p.m.23 views

Heap overflow

An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that non-existing data with a pointer and the size zero to the deliver-data function. libcurl's deliver-data function treats zero as a mag...

6.4CVSS8.9AI score0.06224EPSS
SaveExploits0References8Affected Software2
OSV
OSV
added 2017/10/31 9:29 p.m.2 views

DEBIAN-CVE-2017-1000257

An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that non-existing data with a pointer and the size zero to the deliver-data function. libcurl's deliver-data function treats zero as a mag...

9.1CVSS9.3AI score0.06224EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2017/10/31 9:0 p.m.30 views

CVE-2017-1000257

An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that non-existing data with a pointer and the size zero to the deliver-data function. libcurl's deliver-data function treats zero as a mag...

9.2AI score0.06224EPSS
SaveExploits0References8
curl security advisories
curl security advisories
added 2017/10/23 8:0 a.m.17 views

IMAP FETCH response out of bounds read

libcurl contains a buffer overrun flaw in the IMAP handler. An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that non-existing data with a pointer and the size zero to the deliver-data...

9.1CVSS7.2AI score0.06224EPSS
SaveExploits0Affected Software2
Rows per page
Query Builder