23530 matches found
The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service
...
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
...
The libpng 0.71 allows context-dependent attackers to cause a NULL pointer dereference vectors
...
vsock/virtio: discard packets if the transport changes
...
btrfs: avoid NULL pointer dereference if no valid extent tree
...
smb: client: fix double free of TCP_Server_Info::hostname
...
sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
...
iomap: avoid avoid truncating 64-bit offset to 32 bits
...
mptcp: sysctl: sched: avoid using current->nsproxy
...
ipvlan: Fix use-after-free in ipvlan_get_iflink().
...
GSS-NTLMSSP vulnerable to memory leak when parsing usernames
...
GSS-NTLMSSP vulnerable to multiple out-of-bounds reads when decoding NTLM fields
...
Uncaught Exception (due to a data race) leads to process termination in Waitress
...
id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).
...
Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service
...
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
...
Buffer overflow in libpng allows remote attackers to cause a denial of service
...
Multiple buffer overflows in libpng allow remote attackers to cause a denial of service
...
GSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 strings
...
HTTP Request Smuggling in waitress
...
libpng before 1.6.32 does not properly check the length of chunks against the user limit.
...
The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service
...
The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service
...
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
...
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact
...
An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.
...
NFC: nci: Add bounds checking in nci_hci_create_pipe()
...
In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption.
...
CVE-2024-4030
...
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
...
CVE-2024-3219
...
ksmbd: set ATTR_CTIME flags when setting mtime
...
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
...
Excessive Platform Resource Consumption within a Loop when unmarshalling Compose file having recursive loop
...
net: stmmac: fix TSO DMA API usage causing oops
...
ALSA: control: Avoid WARN() for symlink errors
...
can: hi311x: hi3110_can_ist(): fix potential use-after-free
...
net: enetc: Do not configure preemptible TCs if SIs do not support
...
net: avoid potential UAF in default_operstate()
...
Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
...
mptcp: fix TCP options overflow.
...
netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
...
net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_basic()
...
ipv6: Fix soft lockups in fib6_select_path under high next hop churn
...
bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
...
net/mlx5: DR, prevent potential error pointer dereference
...
netfilter: nf_tables: do not defer rule destruction via call_rcu
...
scsi: sg: Fix slab-use-after-free read in sg_release()
...