3314 matches found
sysctl_coalition_get_pid_list-dos
sysctlcoalitiongetpidlist-dos bsd/kern/syscoalition.c 内の sysctlcoalitiongetpidlist 関数は、coalitiongetpidlist 関数を使用してコアリション内の PID のリストを収集します。この関数は、成功した場合は PID の数を返し、失敗した場合は負の errno を返します。しかし、sysctlcoalitiongetpidlist 関数はエラー条件を適切にチェックしておらず、負の数の PID を SYSCTLOUT 経由でユーザ空間に送信しようとします。length パラメータは sizet...
flow_divert-heap-overflow
flowdivert-heap-overflow flowdivert-heap-overflow 是针对 CVE-2016-1827 的概念验证漏洞利用，该漏洞已在 OS X El Capitan 10.11.5 和 iOS 9.3.2 中修复。 该漏洞是函数 flowdiverthandleappmapcreate 中针对用户空间提供的不可信长度进行的一系列未检查算术运算。利用该漏洞需要 root 权限。 此概念验证会在 OS X Yosemite 10.10.5 上触发内核恐慌。在 El Capitan 中，长度字段已从 64 位改为 32...
CVE-2017-14980
🐞 CVE-2017-14980: Sync Breeze Enterprise 10.0.28 - スタックベースのバッファオーバーフロー Sync Breeze Enterprise 10.0.28 の /login ハンドラを通じて到達可能なスタックベースのバッファオーバーフロー。入力長のチェック漏れがスタックメモリを破壊する様子を示しています。 📑 目次 このリポジトリが存在する理由 この脆弱性が興味深い理由 背景と影響を受けるソフトウェア 脆弱性について クラッシュのトリガー エクスプロイト方法 🎓 このリポジトリが存在する理由...
CVE-2026-84276
IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the...
CVE-2026-106436
The MongoDB PHP Driver contains a vulnerability in its BSON encoder caused by unchecked return values when a document exceeds the libbson size limit. This flaw can leave the encoder in an invalid state, allowing an unauthenticated actor to trigger a denial of service by terminating the PHP worker...
CVE-2026-84276
IBM Guardium Data Protection version 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller . An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion . This flaw ca...
EUVD-2026-95168
IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the...
CVE-2025-52099
CVE-2025-52099 SQLite 3.50.0 における整数オーバーフロー SQLite 3.50.0 の setupLookaside 関数で整数オーバーフローを引き起こす概念実証（PoC）を以下に示します。このオーバーフローは、sz nBig の乗算がチェックされずに発生し、負の値にラップして不正なメモリ書き込みを引き起こす可能性があります。 テスト環境: Ubuntu 22.04 x8664 + SQLite 3.50.0（カスタムビルド） PoC コード（C）: include include int main sqlite3 db; // Open SQLite...
cve-2026-25994_PJSIP
CVE-2026-25994 – PJNATH ICE スタックバッファオーバーフロー pjsip ≤ 2.16 概要 CVE-2026-25994 は、pjsip ≤ 2.16 の ICE（Interactive Connectivity Establishment）実装、具体的には PJNATH コンポーネントに影響を与えるスタックベースのバッファオーバーフロー脆弱性です。 この脆弱性は以下の関数に存在します： pjicesesscreatechecklist 場所： pjnath/src/pjnath/icesession.c 脆弱性の詳細 この問題は、ICE...
PT-2026-108159
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2.2 Description A denial-of-service issue exists in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can send malformed task data. This...
Linux Distros Unpatched Vulnerability : CVE-2026-106122
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortst...
DEBIAN-CVE-2026-106122
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by...
CVE-2026-106122
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by...
CVE-2026-106122 RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by...
CVE-2026-106122 RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by...
Astra Linux – Vulnerability in gst-plugins-good1.0
GStreamer is a library for constructing graphs of media-handling components. A OOB-read vulnerability has been discovered in the qtdemuxparsecontainer function within qtdemux.c. In the parent function qtdemuxparsenode, the value of length is not properly checked. As a result, if length is large...
Astra Linux – Vulnerability in libstb
stbimage is a single-file library licensed under MIT that is used for processing images. The stbigetn function reads a specified number of bytes from the context usually a file into the specified buffer. If the file stream points to the end of the file, it returns zero. There are two places where...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: In virtiobt, there is a issue where skbPutskb, len is called before proper validation of len. len comes directly from virtqueuegetbuf, without any validation against the buffer that is posted to the device. The RX skb ...
CentOS Linux 7 [TuxCare] Security Update: binutils / binutils-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1786357058)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1786357058 advisory. - A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tgtagtype of the file prdbg.c. Performing a...
