Libevent Heap Buffer Overflow DoS

The vulnerability of the evhttpdecodeuriinternal function in the Libevent asynchronous event notification library is related to deficiencies in HTTP request processing. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Libevent DNS Name Buffer Overflow DoS

The vulnerability of the dnsnametolabels function in the Libevent asynchronous event notification library is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Libevent Buffer Overflow DoS

The vulnerability of the buffereventsocketsetconnaddress function in the Libevent asynchronous event library is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

evhttp HTTP parser Heap Buffer Overflow DoS

The vulnerability of the evhttpfindheader function in the evhttp HTTP parser from the Libevent asynchronous event handling library is related to deficiencies in HTTP request processing. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Libevent Heap Buffer Overflow DoS

The vulnerability of the decodetaginternal function in the Libevent asynchronous event notification library is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Libevent Heap Buffer Overflow DoS

The vulnerability of the evtagunmarshalheader function in the Libevent asynchronous event notification library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Linux kernel reset_add gpio_aux_device() Data Compromise

The vulnerability of the resetadd gpioauxdevice function in the drivers/reset/core.c file of the Linux kernel-based universal reset controller driver relates to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the getherdisconnect function in the drivers/usb/gadget/function/uether.c module of the Linux device driver framework is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service...

Linux IPv6 SRH RCE

The vulnerability of the ipv6srhrcv and seg6hmacvalidateskb functions in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

src/libgit2/transports/smart_pkt.c Heap Buffer Overflow DoS

The vulnerability of the setdata function in the src/libgit2/transports/smartpkt.c file, which implements Git methods in C language, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

st_lsm6dsx_fifo_setup Heap Buffer Overflow DoS

The vulnerability of the stlsm6dsxfifosetup function in the drivers/iio/imu/stlsm6dsx/stlsm6dsxbuffer.c module of various types of embedded sensors in the Linux operating system is related to reading beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to compromi...

Libevent Heap Buffer Overflow DoS

The vulnerability of the evbufferaddbufferreference function in the Libevent event-driven library is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

mpu3050triggerprobe Heap Buffer Overflow DoS

The vulnerability of the mpu3050triggerprobe function in the drivers/iio/gyro/mpu3050-core.c file of various types of embedded sensors in the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the...

Libevent WebSocket DoS

The vulnerability of the ws.c file of the WebSocket server in the Libevent library-related event notification asynchronous library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Linux kernel BPF kprobe multi-link attach DoS

The vulnerability of the bpfkprobemultilinkattach function in the kernel/trace/bpfTrace.c module, which supports kernel tracing in Linux operating systems, is related to the use of a initially dangerous function. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux MMC/SD/SDIO card driver vub300_disconnect() Heap Buffer Overflow

The vulnerability of the vub300disconnect function in the drivers/mmc/host/vub300.c module of the MMC/SD/SDIO card driver for the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the checkbuiltinidleenabled function in the kernel/sched/extidle.c module, which is part of the Linux kernel’s resource management support for operating systems, is related to an incorrect definition of internal states. Exploiting this vulnerability could allow a remote...

SSHFS Arbitrary Command Execution

The vulnerability of the findbasepath function in the SSHFS file system lies in the ability to exploit or modify arguments. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

WebOb Response._make_location_absolute() Phishing

The vulnerability of the Response.makelocationabsolute function in the src/webob/response.py file, a library for analyzing HTTP requests and generating HTTP responses in WebOb, is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a remote attacker t...

SumatraPDF LZX Heap Buffer Overflow DoS

The vulnerability of the makeDecodeTable function in the ext/CHMLib/lzx.c file of the SumatraPDF program, which is used to display documents in formats such as PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu, relates to the execution of operations outside of the buffer. Exploiting this vulnerability cou...

tps53679_identify_chip() Function Unauthorized Access

The vulnerability of the tps53679identifychip function in the drivers/hwmon/pmbus/tps53679.c driver for monitoring hardware in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...

Tenda CH22 Router FormcreateFileName Arbitrary Command Execution

The vulnerability of the formcreateFileName function in the /goform/formcreateFileName file of the Tenda CH22 router microprogramming system is related to the failure to take measures to eliminate special elements in the output data. Exploiting this vulnerability may allow a remote attacker to...

Linux TCP AO Function Use-After-Free

The vulnerability of the tcpaoverifyhash function in the net/ipv4/tcpao.c module of the Linux operating system’s IPv4 protocol implementation is related to an incorrect session expiration time. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrit...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the ethgetdrvinfo function in the drivers/usb/gadget/function/uether.c file of the Linux device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel RxRPC Buffer Overflow DoS

The vulnerability of the rxrpcpreparsexdryfsrxgk function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an...

urllib HTTP Redirection Access Protected Information

The vulnerability of the requestInternal handling function in the urllib package of the Node.js npm package stack involves exposing confidential information to unauthorized entities. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

Keycloak-services Bypass Unauthorized Access

The vulnerability of the keycloak-services component of the Keycloak identity and access management software is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker to bypass existing security measures and gain unauthorized access to the syst...

Libevent Heap Buffer Overflow DoS

The vulnerability of the evwsnewsession function in the Libevent asynchronous event notification library is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a attacker to cause a service failure...

Mongoose TLS Man-in-the-Middle

The vulnerabilities of the functions mgtlsverifycertsan and mgtlsverifycertcn in the src/tlsbuiltin.c file of the Mongoose library are related to errors in the certificate validation process. Exploiting these vulnerabilities could allow a remote attacker to perform “man-in-the-middle” attacks...

dt2815_attach() DoS

The vulnerability of the dt2815attach function in the drivers/comedi/drivers/dt2815.c module, which supports Linux kernel-based data collection devices, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the dobecomenonbusy function in the drivers/comedi/comedifops.c module of the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability can allow a remote attacker to cause service failure...

CIX Technology Processor Buffer Overflow

The vulnerability of the microprogramming software of CIX Technology’s CD8180 and CD8160 processors lies in the overflow of buffers in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code and bypass existing security mechanisms...

Linux SPI Amlogic Buffer Overflow

The vulnerability of the amlsfcprobe function in the drivers/spi/spi-amlogic-spifc-a4.c driver for Linux SPI devices is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

cdns3 gadget function Heap Buffer Overflow DoS

The vulnerability of the cdns3gadgetepqueue function in the drivers/usb/cdns3/cdns3-gadget.c file of the Linux device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

EDAC Kernel Driver Heap Buffer Overflow DoS

The vulnerability of the edacmcalloc function in the drivers/edac/edacmc.c module of the EDAC driver for the Linux operating system involves the allocation of resources without any restrictions or regulation. Exploiting this vulnerability can allow a perpetrator to cause service failures...

Mellanox Ethernet Network Adapter Heap Buffer Overflow

The vulnerability of the mlx5eskbfromcqempwrqnonlinear function in the drivers/net/ethernet/mellanox/mlx5/core/enrx.c file of the Ethernet Mellanox network adapter driver in the Linux operating system is related to errors in resource counters. Exploiting this vulnerability could allow an attacker...

Linux NFC Kernel Driver Heap Buffer Overflow DoS

The vulnerability of the pn532receivebuf function in the drivers/nfc/pn533/uart.c file of the Linux NFC driver module is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

SquashFS Component Disclosure DoS

The vulnerability of the Lz4Decode function in the NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp component of the SquashFS compressor, a 7-Zip-based archive compressor, involves reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to...

zimbra-snmp Code Execution

The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite email management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rzmtu3countenablewrite function in the drivers/counter/rz-mtu3-cnt.c module of the Linux kernel is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux kernel Memory Management Heap Buffer Overflow DoS

The vulnerability of the walkpudrange function in the mm/pagewalk.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

qla2xxx SCSI Function Use-After-Free

The vulnerability of the qla24xxelsdcmdiocb function in the drivers/scsi/qla2xxx/qlaiocb.c driver for Linux SCSI device drivers is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

Puya Semiconductor Readout Protection Unauthorized Access

The vulnerability of the Readout Protection protection mechanism in microprogramming software for microcontroller devices from Puya Semiconductor, models PY32F00X, PY32F0XX, and PY32F403, is related to deficiencies in the mechanism for assigning internal resources with access levels for debugging...

Linux kernel Rocket Probe Unauthorized Access

The vulnerability of the rocketprobe function in the drivers/accel/rocket/rocketdrv.c driver for kernel acceleration devices in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain...

JSONata environment lookup Code Execution

The vulnerability of the environment.lookup function in the childprocess module of the json-data processing tool JSONata is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Dahua RPC2_Login Privilege Escalation

The vulnerability of the RPC2Login authentication mechanism in the Dahua device’s microprogramming software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

Dahua Loopback Authentication Privilege Escalation

The vulnerability of the Loopback microprogramming system authentication mechanism of Dahua devices is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers, operating remotely, to enhance their privileges...

JSONata lookup() function Code Execution

The vulnerability of the lookup function in the childprocess module of the json-data transformation software JSONata is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux kernel privcmd_init Heap Buffer Overflow

The vulnerability of the privcmdinit function in the drivers/xen/privcmd.c module of the Linux kernel is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Linux SMB Server Data Compromise

The vulnerabilities in the modules fs/smb/server/mgmt/usersession.c and fs/smb/server/smb2pdu.c of the SMB support in Linux operating systems are related to the reutilization of previously freed memory. Exploiting these vulnerabilities can allow a remote attacker to compromise the confidentiality...