4738 matches found
ALPINE-CVE-2022-0562
Null source pointer passed as an argument to memcpy function within TIFFReadDirectory in tifdirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c...
ALPINE-CVE-2022-0561
Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712...
ALPINE-CVE-2022-0529
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...
ALPINE-CVE-2022-0530
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution...
ALPINE-CVE-2021-0127
Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of service via local access...
ALPINE-CVE-2021-41816
CGI.escapehtml in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms such as Windows where sizet and long have different numbers of bytes. This also affects the CGI gem before 0.3.1 for Ruby...
ALPINE-CVE-2022-0443
Use After Free in GitHub repository vim/vim prior to 8.2...
ALPINE-CVE-2022-0417
Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2...
ALPINE-CVE-2021-46668
MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...
ALPINE-CVE-2021-46667
MariaDB before 10.6.5 has a sqllex.cc integer overflow, leading to an application crash...
ALPINE-CVE-2021-46665
MariaDB through 10.5.9 allows a sqlparse.cc application crash because of incorrect usedtables expectations...
ALPINE-CVE-2021-46663
MariaDB through 10.5.13 allows a hamaria::extra application crash via certain SELECT statements...
ALPINE-CVE-2021-46661
MariaDB through 10.5.9 allows an application crash in findfieldintables and findorderinlist via an unused common table expression CTE...
ALPINE-CVE-2021-46664
MariaDB through 10.5.9 allows an application crash in subselectpostjoinaggr for a NULL value of aggr...
ALPINE-CVE-2021-46662
MariaDB through 10.5.9 allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...
ALPINE-CVE-2021-46101
In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly...
ALPINE-CVE-2021-45079
In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2 even without server authentication...
ALPINE-CVE-2022-0408
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
ALPINE-CVE-2022-0413
Use After Free in GitHub repository vim/vim prior to 8.2...
ALPINE-CVE-2022-0407
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
ALPINE-CVE-2021-46659
MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...
ALPINE-CVE-2022-0392
Heap-based Buffer Overflow in GitHub repository vim prior to 8.2...
ALPINE-CVE-2022-0393
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
ALPINE-CVE-2022-21722
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In version 2.11.1 and prior, there are various cases where it is possible that certain incoming RTP/RTCP packets can potentially...
ALPINE-CVE-2022-21723
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions 2.11.1 and prior, parsing an incoming SIP message that contains a malformed multipart can potentially cause...
ALPINE-CVE-2022-23990
Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function...
ALPINE-CVE-2022-0368
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
ALPINE-CVE-2022-0361
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
ALPINE-CVE-2022-0359
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2...
ALPINE-CVE-2022-23959
In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise Cache Plus 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections...
ALPINE-CVE-2022-23034
A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a...
ALPINE-CVE-2022-23035
Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up after the guest's use of the device. In the case where an interrupt is not quiescent yet at the time...
ALPINE-CVE-2022-23033
arm: guestphysmapremovepage not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm p2mremovemapping, guestphysmapremovepage, and p2msetentry with mfn set to INVALIDMFN do not actually clear the pagetable entry if the entry doesn't have the vali...
ALPINE-CVE-2022-23852
Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...
ALPINE-CVE-2021-33913
libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code via an unauthenticated e-mail message from anywhere on the Internet with a crafted SPF DNS record, because of SPFrecordexpanddata in spfexpand.c. The amount of overflowed data depend...
ALPINE-CVE-2021-33912
libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code via an unauthenticated e-mail message from anywhere on the Internet with a crafted SPF DNS record, because of incorrect sprintf usage in SPFrecordexpanddata in spfexpand.c...
ALPINE-CVE-2022-23304
The implementations of EAP-pwd in hostapd before 2.10 and wpasupplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495...
ALPINE-CVE-2022-23303
The implementations of SAE in hostapd before 2.10 and wpasupplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494...
ALPINE-CVE-2022-0213
vim is vulnerable to Heap-based Buffer Overflow...
ALPINE-CVE-2022-20698
A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4 and prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper checks that m...
ALPINE-CVE-2021-44648
GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12...
ALPINE-CVE-2021-43566
All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for...
ALPINE-CVE-2021-36411
An issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a READ memory access in function deriveboundaryStrength of deblock.cc has occurred. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...
ALPINE-CVE-2021-36410
A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function putepelhvfallback when running program dec265...
ALPINE-CVE-2021-36408
An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding file using dec265...
ALPINE-CVE-2021-35452
An Incorrect Access Control vulnerability exists in libde265 v1.0.8 due to a SEGV in slice.cc...
ALPINE-CVE-2022-0158
vim is vulnerable to Heap-based Buffer Overflow...
ALPINE-CVE-2022-0156
vim is vulnerable to Use After Free...