Lucene search
K

56 matches found

Positive Technologies
Positive Technologies
added 2022/05/24 12:0 a.m.3 views

PT-2025-32441

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Bluetooth implementation of the Linux kernel where the strlen function is used with hdev-dev name,short name which are not guaranteed to be NULL terminated. This...

6CVSS7.3AI score0.0008EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2022/01/28 4:15 p.m.4 views

CVE-2022-23097

An issue was discovered in the DNS proxy in Connman through 1.40. forwarddnsreply mishandles a strnlen call, leading to an out-of-bounds read...

9.1CVSS5.8AI score0.00094EPSS
Exploits1References6
OSV
OSV
added 2022/01/28 4:15 p.m.1 views

DEBIAN-CVE-2022-23097

An issue was discovered in the DNS proxy in Connman through 1.40. forwarddnsreply mishandles a strnlen call, leading to an out-of-bounds read...

9.1CVSS7.8AI score0.00094EPSS
Exploits1References1
OSV
OSV
added 2022/01/28 4:15 p.m.2 views

UBUNTU-CVE-2022-23097

An issue was discovered in the DNS proxy in Connman through 1.40. forwarddnsreply mishandles a strnlen call, leading to an out-of-bounds read...

9.1CVSS7.1AI score0.00094EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/01/28 12:0 a.m.3 views

Connman 缓冲区错误漏洞

Connman is a connection manager. A security vulnerability exists in Connman's DNS proxy that stems from forwarddnsreply mishandling strnlen calls, resulting in out-of-bounds reads. No details of the vulnerability are provided at this time...

9.1CVSS5.5AI score0.00094EPSS
Exploits1References10
RedhatCVE
RedhatCVE
added 2020/03/27 7:56 p.m.27 views

CVE-2018-6759

The bfdgetdebuglinkinfo1 function in opncls.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service segmentation fault via a crafted ELF file...

5.5CVSS4.1AI score0.00181EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:0 a.m.2 views

The vulnerability of the bfd_getdebug_link_info_1 function in the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the bfdgetdebuglinkinfo1 function in the GNU Binutils development toolset is related to the lack of checks for the result of the strnlen function. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

5.5CVSS6.7AI score0.00181EPSS
Exploits0References6
OSV
OSV
added 2018/02/06 9:29 p.m.1 views

DEBIAN-CVE-2018-6759

The bfdgetdebuglinkinfo1 function in opncls.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service segmentation fault via a crafted ELF file...

5.5CVSS8.1AI score0.00181EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2018/02/06 9:29 p.m.32 views

CVE-2018-6759

The bfdgetdebuglinkinfo1 function in opncls.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service segmentation fault via a crafted ELF file...

5.5CVSS6.8AI score0.00181EPSS
Exploits0References2
OSV
OSV
added 2018/02/06 9:29 p.m.3 views

ALPINE-CVE-2018-6759

The bfdgetdebuglinkinfo1 function in opncls.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service segmentation fault via a crafted ELF file...

5.5CVSS6.6AI score0.00181EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2018/02/06 8:0 p.m.23 views

CVE-2018-6759

The bfdgetdebuglinkinfo1 function in opncls.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service segmentation fault via a crafted ELF file...

5.5CVSS6.4AI score0.00181EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2017/03/23 2:18 p.m.16 views

CVE-2017-7226

The peILFobjectp function in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2lin...

9.1CVSS1.5AI score0.00379EPSS
Exploits0References1
Prion
Prion
added 2017/03/22 4:59 p.m.15 views

Heap overflow

The peILFobjectp function in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2lin...

6.4CVSS8.8AI score0.00379EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2017/03/22 4:59 p.m.1 views

DEBIAN-CVE-2017-7226

The peILFobjectp function in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2lin...

9.1CVSS9.1AI score0.00379EPSS
Exploits0References1
Cvelist
Cvelist
added 2017/03/22 4:0 p.m.21 views

CVE-2017-7226

The peILFobjectp function in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2lin...

6.9AI score0.00379EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2006/06/27 12:0 a.m.2 views

PT-2006-1522 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.16 Description: The issue is related to the strnlen user function in the Linux kernel, which can return an incorrect value. This allows local users to cause a denial of service via unknown vectors...

9CVSS7.1AI score0.23284EPSS
Exploits0References258
Rows per page
Query Builder