29 matches found
CVE-2020-24646
A tftpserver stack-based buffer overflow remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
EUVD-2020-8101
Malware in sbrugna...
SUSE CVE-2020-16135
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...
libssh: NULL pointer dereference in sftpserver.c if ssh_buffer_new returns NULL
A flaw was found in libssh. A NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...
EulerOS Virtualization 2.9.1 : libssh (EulerOS-SA-2021-1608)
According to the version of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL.CVE-2020-16135 Note that Tenable Network...
Huawei EulerOS: Security Advisory for libssh (EulerOS-SA-2021-1584)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : libssh (EulerOS-SA-2021-1088)
According to the version of the libssh package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL.CVE-2020-16135 Note that Tenable Network Security has...
libssh: Denial of service
Background libssh is a multiplatform C library implementing the SSHv2 protocol on client and server side. Description libssh was found to have a NULL pointer dereference in tftpserver.c if the function sshbuffernew returns NULL. Impact An attacker could cause a possible Denial of Service conditio...
CVE-2020-24646
A tftpserver stack-based buffer overflow remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
CVE-2020-24646
A tftpserver stack-based buffer overflow remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
Remote code execution
A tftpserver stack-based buffer overflow remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...
CVE-2020-24646
HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is affected by CVE-2020-24646. The vulnerability is a stack-based buffer overflow in the tftpserver component that allows remote code execution. The root cause is improper validation of the length of user-supplied data prior to co...
CVE-2020-16135
A flaw was found in libssh. A NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicabili...
Libssh Null Pointer Dereference Vulnerability
libssh is a multi-platform C library that implements the SSHv2 protocol on the client and server side. A null pointer dereference vulnerability exists in tftpserver.c in libssh 0.9.4. No detailed vulnerability details are provided at this time...
DEBIAN-CVE-2020-16135
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...
UBUNTU-CVE-2020-16135
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...
Null pointer dereference
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...
CVE-2020-16135
CVE-2020-16135 affects libssh 0.9.4. The vulnerability is a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL, which can lead to a crash/denial of service. Connected documents confirm the issue and indicate that fixes were released (e.g., libssh 0.9.5 and security advisories...
Hewlett Packard Enterprise Intelligent Management Center tftpserver Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the val1 parameter provided to...
Hewlett Packard Enterprise Intelligent Management Center tftpserver getFileData Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the mpkgLimitSize parameter...