23144 matches found
GSS-NTLMSSP vulnerable to incorrect free when decoding target information
...
net: fec: handle page_pool_dev_alloc_pages error
...
vsock/bpf: return early if transport is not assigned
...
sctp: sysctl: auth_enable: avoid using current->nsproxy
...
Out-of-bounds write in exiv2
...
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact
...
Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service
...
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service
...
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
...
The libpng 0.71 allows context-dependent attackers to cause a NULL pointer dereference vectors
...
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
...
NFC: nci: Add bounds checking in nci_hci_create_pipe()
...
GSS-NTLMSSP vulnerable to memory leak when parsing usernames
...
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.
...
GSS-NTLMSSP vulnerable to out-of-bounds read when decoding target information
...
tty: xilinx_uartps: split sysrq handling
...
vxlan: Fix uninit-value in vxlan_vnifilter_dump()
...
filemap: avoid truncating 64-bit offset to 32 bits
...
vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
...
Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2
...
An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow.
...
Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2
...
iomap: avoid avoid truncating 64-bit offset to 32 bits
...
ipvlan: Fix use-after-free in ipvlan_get_iflink().
...
Exiv2 has an out-of-bounds read in AsfVideo::streamProperties
...
Memory corruption issues is Cloudflare zlib implementation
...
Uncaught Exception (due to a data race) leads to process termination in Waitress
...
libpng before 1.6.32 does not properly check the length of chunks against the user limit.
...
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
...
Multiple buffer overflows in libpng allow remote attackers to cause a denial of service
...
pktgen: Avoid out-of-bounds access in get_imix_entries
...
block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
...
smb: client: fix double free of TCP_Server_Info::hostname
...
sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
...
sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
...
sctp: sysctl: udp_port: avoid using current->nsproxy
...
Asio C++ Library lacks a fallback error code in the case of SSL_ERROR_SYSCALL
...
PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.
...
An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.
...
usbnet: ipheth: fix DPE OoB read
...
bpf: Fix bpf_sk_select_reuseport() memory leak
...
CVE-2024-3219
...
CVE-2024-4030
...
In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption.
...
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
...
iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
...
mptcp: fix TCP options overflow.
...
ksmbd: set ATTR_CTIME flags when setting mtime
...