CWE-193 Archives - CVE Vulnerability

CVE-2008-3964

Sun, 26 Feb 2023 09:10:17 +0000

Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a PNG image with crafted zTXt chunks, related to (1) the png_push_read_zTXt function in pngread.c, and possibly related to (2) pngtest.c.

The post CVE-2008-3964 appeared first on CVE Vulnerability.

CVE-2008-3535

Sun, 26 Feb 2023 09:10:03 +0000

Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service (system crash) via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Linux Test Project.

The post CVE-2008-3535 appeared first on CVE Vulnerability.

CVE-2018-9860

Sun, 26 Feb 2023 06:51:52 +0000

An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An off-by-one error when processing malformed TLS-CBC ciphertext could cause the receiving side to include in the HMAC computation exactly 64K bytes of data following the record buffer, aka an over-read. The MAC comparison will subsequently fail and the connection will be closed. This could be used for denial of service. No information leak occurs.

The post CVE-2018-9860 appeared first on CVE Vulnerability.

CVE-2018-8828

Sun, 26 Feb 2023 06:51:37 +0000

A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A specially crafted REGISTER message with a malformed branch or From tag triggers an off-by-one heap-based buffer overflow in the tmx_check_pretran function in modules/tmx/tmx_pretran.c.

The post CVE-2018-8828 appeared first on CVE Vulnerability.

CVE-2018-7329

Sun, 26 Feb 2023 06:51:01 +0000

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-s7comm.c had an infinite loop that was addressed by correcting off-by-one errors.

The post CVE-2018-7329 appeared first on CVE Vulnerability.

CVE-2018-5800

Sun, 26 Feb 2023 06:50:28 +0000

An off-by-one error within the “LibRaw::kodak_ycbcr_load_raw()” function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.7 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash.

The post CVE-2018-5800 appeared first on CVE Vulnerability.

CVE-2018-14682

Sun, 26 Feb 2023 06:46:25 +0000

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.

The post CVE-2018-14682 appeared first on CVE Vulnerability.

CVE-2018-14679

Sun, 26 Feb 2023 06:46:25 +0000

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).

The post CVE-2018-14679 appeared first on CVE Vulnerability.

CVE-2018-14599

Sun, 26 Feb 2023 06:46:23 +0000

An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.

The post CVE-2018-14599 appeared first on CVE Vulnerability.

CVE-2020-8443

Sun, 26 Feb 2023 06:43:24 +0000

In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to an off-by-one heap-based buffer overflow during the cleaning of crafted syslog msgs (received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted).

The post CVE-2020-8443 appeared first on CVE Vulnerability.