23144 matches found
An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.
...
Out-of-bounds write in exiv2
...
GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.
...
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.
...
GSS-NTLMSSP vulnerable to out-of-bounds read when decoding target information
...
An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.
...
GSS-NTLMSSP vulnerable to multiple out-of-bounds reads when decoding NTLM fields
...
id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).
...
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service
...
Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service
...
The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service
...
sctp: sysctl: udp_port: avoid using current->nsproxy
...
filemap: avoid truncating 64-bit offset to 32 bits
...
iomap: avoid avoid truncating 64-bit offset to 32 bits
...
Asio C++ Library lacks a fallback error code in the case of SSL_ERROR_SYSCALL
...
sctp: sysctl: auth_enable: avoid using current->nsproxy
...
A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.
...
fs/proc: fix softlockup in __read_vmcore (part 2)
...
usbnet: ipheth: fix possible overflow in DPE length check
...
nilfs2: fix possible int overflows in nilfs_fiemap()
...
ksmbd: fix integer overflows on 32 bit systems
...
ptp: Ensure info->enable callback is always set
...
gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
...
net/rose: prevent integer overflows in rose_setsockopt()
...
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
...
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact
...
The libpng 0.71 allows context-dependent attackers to cause a NULL pointer dereference vectors
...
HTTP Request Smuggling in waitress
...
The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service
...
vsock/virtio: discard packets if the transport changes
...
net/mlx5: Clear port select structure when fail to create
...
bpf: Fix bpf_sk_select_reuseport() memory leak
...
btrfs: avoid NULL pointer dereference if no valid extent tree
...
pktgen: Avoid out-of-bounds access in get_imix_entries
...
block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
...
openvswitch: fix lockup on tx to unregistering netdev with carrier
...
net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel
...
Timing side-channel in ECDSA signature computation
...
sctp: sysctl: rto_min/max: avoid using current->nsproxy
...
net: fec: handle page_pool_dev_alloc_pages error
...
smb: client: fix double free of TCP_Server_Info::hostname
...
CVE-2024-4030
...
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
...
In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption.
...
CVE-2024-3219
...
hrtimers: Handle CPU state correctly on hotplug
...
media: uvcvideo: Fix double free in error path
...
soc: qcom: socinfo: Avoid out of bounds read of serial number
...