13 matches found
CVE-2026-33040
libp2p-rust is the official rust language Implementation of the libp2p networking stack. In versions prior to 0.49.3, the Gossipsub implementation accepts attacker-controlled PRUNE backoff values and may perform unchecked time arithmetic when storing backoff state. A specially crafted PRUNE contr...
CVE-2026-33040 libp2p-rust: Gossipsub PRUNE.backoff Duration Overflow
libp2p-rust is the official rust language Implementation of the libp2p networking stack. In versions prior to 0.49.3, the Gossipsub implementation accepts attacker-controlled PRUNE backoff values and may perform unchecked time arithmetic when storing backoff state. A specially crafted PRUNE contr...
CVE-2026-33040
The CVE concerns libp2p-rust Gossipsub: prior to version 0.49.3, the Gossipsub backoff handling accepts attacker-controlled PRUNE backoff values, enabling unchecked time arithmetic that can overflow when updating backoff state. A crafted PRUNE message with a very large backoff (e.g., u64::MAX) ca...
EUVD-2017-6129
Malware in sbrugna...
CVE-2017-14630
In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file inpcx.cpp, leading to an invalid write operation...
sam2p file write vulnerability
sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. A file write vulnerability exists in sam2p version 0.49.3. An attacker can exploit this vulnerability to write to an illegal address...
sam2p integer overflow vulnerability (CNVD-2017-34029)
sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. An integer overflow vulnerability exists in sam2p version 0.49.3. A remote attacker could exploit this vulnerability to cause memory corruption...
sam2p heap buffer overflow vulnerability (CNVD-2017-34028)
sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. A heap buffer overflow vulnerability exists in the 'pcxLoadRaster' function of the inpcx.cpp file in sam2p version 0.49.3. An attacker can exploit this vulnerability to cause a denial of...
sam2p integer overflow vulnerability
sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. An integer overflow vulnerability exists in the 'pcxLoadImage24' function of the inpcx.cpp file in sam2p version 0.49.3. An attacker can exploit this vulnerability to cause an invalid write...
sam2p denial of service vulnerability
sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. A denial of service vulnerability exists in the 'inxpmreader' function of inxpm.cpp in sam2p version 0.49.3. An attacker can exploit this vulnerability to cause a denial of service crash...
sam2p heap buffer overflow vulnerability
sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. A heap buffer overflow vulnerability exists in the 'pcxLoadImage24' function of the inpcx.cpp file in sam2p version 0.49.3. An attacker can exploit this vulnerability to cause a denial of...
CVE-2017-14631
In sam2p 0.49.3, the pcxLoadRaster function in inpcx.cpp has an integer signedness error leading to a heap-based buffer overflow...
UBUNTU-CVE-2017-14628
In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file inpcx.cpp...