PT-2021-28316

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE crash has been reported, with the crash state involving functions such as explicit bzero, crypto free, and ssh disconnect...

samba: Out of bounds read in AD DC LDAP server

A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability...

PT-2021-28055

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow write crash. Technical details about the crash include the rle decode function, rans uncompress to 4x16...

OSV-2018-204 UNKNOWN WRITE in __msan_memcpy.part.51

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9845 Crash type: UNKNOWN WRITE Crash state: msanmemcpy.part.51 QuickOpen::ReadRaw QuickOpen::ReadNext...

PT-2021-27506

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE crash has been reported, involving functions such as ofpbuf insert, nx put raw, and nx put match. Recommendations: At the...

PT-2020-22078

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow WRITE crash. The crash occurs in the WelsDec::DecodeCurrentAccessUnit and WelsDec::ConstructAccessUnit...

PT-2020-22060

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE crash has been reported, with the crash state involving functions such as WelsCheckAndRecoverForFutureDecoding,...

PT-2020-21776

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow write crash. The crash state includes functions such as find dom, opt loop, and bpf optimize. No information...

PT-2020-21668

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE crash has been reported, involving functions such as xport construct format, xport read labels v9, and xport read variables. N...

PT-2020-22380

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A stack-buffer-overflow crash has been reported, specifically a WRITE crash. The crash occurs in the following functions: not::Message::Read,...

PT-2020-22302

Name of the Vulnerable Software and Affected Versions ZSTD affected versions not specified Description The issue is related to a stack-buffer-overflow write crash. Technical details about the crash include the ZSTD decodeLiteralsBlock, ZSTD decompressBlock, and ZSTD decompressDCtx functions...

PT-2020-22393

Name of the Vulnerable Software and Affected Versions varlink affected versions not specified Description The issue is related to a heap-buffer-overflow write crash. Technical details include the varlink enqueue json function, varlink error function, and varlink errorb function. Recommendations A...

PT-2020-22240

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow WRITE crash. The crash state includes functions such as UA copy, RefTree add, and Operation Browse. No...

kernel: Off-by-one error in selinux_setprocattr (/proc/self/attr/fscreate)

A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files. An empty null write to this file can crash the system by causing the system to attempt to access unmapped kernel memory...

CVE-2016-6352

The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service out-of-bounds write and crash via crafted dimensions in an ICO file...

DEBIAN-CVE-2015-7554

The TIFFVGetField function in tifdir.c in libtiff 4.0.6 allows attackers to cause a denial of service invalid memory write and crash or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image...

openssl: race condition in ssl_parse_serverhello_tlsext

A race condition was found in the way OpenSSL handled ServerHello messages with an included Supported EC Point Format extension. A malicious server could possibly use this flaw to cause a multi-threaded TLS/SSL client using OpenSSL to write into freed memory, causing the client to crash or execut...