leap Archives - CVE Vulnerability

CVE-2018-20860

Sun, 26 Feb 2023 06:48:45 +0000

libopenmpt before 0.3.13 allows a crash with malformed MED files.

The post CVE-2018-20860 appeared first on CVE Vulnerability.

CVE-2018-20177

Sun, 26 Feb 2023 06:48:29 +0000

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.

The post CVE-2018-20177 appeared first on CVE Vulnerability.

CVE-2018-1000802

Sun, 26 Feb 2023 06:44:40 +0000

Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command (‘Command Injection’) vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace.

The post CVE-2018-1000802 appeared first on CVE Vulnerability.

CVE-2020-9490

Sun, 26 Feb 2023 06:43:46 +0000

Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the ‘Cache-Digest’ header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via “H2Push off” will mitigate this vulnerability for unpatched servers.

The post CVE-2020-9490 appeared first on CVE Vulnerability.

CVE-2020-9484

Sun, 26 Feb 2023 06:43:46 +0000

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=”null” (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.

The post CVE-2020-9484 appeared first on CVE Vulnerability.

CVE-2020-9430

Sun, 26 Feb 2023 06:43:45 +0000

In Wireshark 3.2.0 to 3.2.1, 3.0.0 to 3.0.8, and 2.6.0 to 2.6.14, the WiMax DLMAP dissector could crash. This was addressed in plugins/epan/wimax/msg_dlmap.c by validating a length field.

The post CVE-2020-9430 appeared first on CVE Vulnerability.

CVE-2020-9429

Sun, 26 Feb 2023 06:43:45 +0000

In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value.

The post CVE-2020-9429 appeared first on CVE Vulnerability.

CVE-2020-9273

Sun, 26 Feb 2023 06:43:41 +0000

In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in alloc_pool in pool.c, and possible remote code execution.

The post CVE-2020-9273 appeared first on CVE Vulnerability.

CVE-2020-8955

Sun, 26 Feb 2023 06:43:35 +0000

irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a malformed IRC message 324 (channel mode).

The post CVE-2020-8955 appeared first on CVE Vulnerability.

CVE-2020-8624

Sun, 26 Feb 2023 06:43:28 +0000

In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone’s content could abuse these unintended additional privileges to update other contents of the zone.

The post CVE-2020-8624 appeared first on CVE Vulnerability.