Intel(R) oneAPI DPC++/C++ Compiler 安全漏洞

IntelR oneAPI DPC++/C++ Compiler is a compiler from Intel Corporation. A security vulnerability exists in Intel C++ Compiler Classic before 2021.6 and IntelR oneAPI Toolkits before 2022.2, which stems from improper handling of Unicode encoding in the code, and can be exploited by an attacker to...

SUSE CVE-2014-1346

WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, does not properly interpret Unicode encoding, which allows remote attackers to spoof a postMessage origin, and bypass intended restrictions on sending a message to a connected frame or window, via crafted characters in a URL...

SUSE CVE-2021-4217

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...

PT-2022-5491 · Grub2 +11 · Grub2 +11

Name of the Vulnerable Software and Affected Versions: grub2 affected versions not specified Description: The issue arises when rendering certain unicode sequences, as grub2's font code does not properly validate if the informed glyph's width and height is constrained within bitmap size. This...

Updated unzip packages fix security vulnerability

Improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution. CVE-2021-4217 Conversion of a wide string to a local string that leads to a heap of out-of-bound write. Thi...

MGASA-2022-0371 Updated unzip packages fix security vulnerability

Improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution. CVE-2021-4217 Conversion of a wide string to a local string that leads to a heap of out-of-bound write. Thi...

USN-5673-1 unzip vulnerabilities

It was discovered that unzip did not properly handle unicode strings under certain circumstances. If a user were tricked into opening a specially crafted zip file, an attacker could possibly use this issue to cause unzip to crash, resulting in a denial of service, or possibly execute arbitrary...

USN-5665-1 pcre3 vulnerabilities

It was discovered that PCRE incorrectly handled certain regular expressions. A remote attacker could use this issue to cause applications using PCRE to crash, resulting in a denial of service. CVE-2017-6004 It was discovered that PCRE incorrectly handled certain Unicode encoding. A remote attacke...

AZL-35342 CVE-2021-4217 affecting package unzip for versions less than 6.0-22

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...

CVE-2021-4217

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...

ALPINE-CVE-2021-4217

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...

AZL-10680 CVE-2021-4217 affecting package unzip for versions less than 6.0-22

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...

DEBIAN-CVE-2021-4217

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...

UBUNTU-CVE-2021-4217

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...

Info-ZIP UnZip 代码问题漏洞

Info-ZIP UnZip is a set of tools for decompressing the ".zip" file format on the Unix platform by Greg Roelofs, an individual developer in the United States. A security vulnerability exists in Info-ZIP UnZip, which stems from the mishandling of Unicode strings, which could allow an attacker to...

SUSE-SU-2022:1091-1 Security update for python

This update for python fixes the following issues: - CVE-2022-0391: Fixed URL sanitization containing ASCII newline and tabs in urlparse bsc1195396. - CVE-2021-4189: Fixed ftplib not to trust the PASV response bsc1194146. - CVE-2021-3572: Fixed an improper handling of unicode characters in pip...

SUSE-SU-2022:1044-1 Security update for python3

This update for python3 fixes the following issues: - CVE-2021-3572: Fixed an improper handling of unicode characters in pip bsc1186819...

Security update for python3 (moderate)

openSUSE Security Update: Security update for python3 Announcement ID: openSUSE-SU-2022:0942-1 Rating: moderate References: 1186819 Cross-References: CVE-2021-3572 CVSS scores: CVE-2021-3572 SUSE: 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.3 openSUSE Leap...

expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution

A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences for example, from start tag names to the XML processing application on top of expat can lead to arbitrary code execution. This issue is dependent on how invalid UTF-8 is handled inside the XML processor...

PT-2022-7197 · Unzip +5 · Unzip +5

Name of the Vulnerable Software and Affected Versions: unzip affected versions not specified Description: A flaw was found in the handling of Unicode strings, which can lead to a null pointer dereference. This issue allows an attacker to input a specially crafted zip file, potentially leading to ...