CWE-252 Archives - CVE Vulnerability

CVE-2018-20216

Sun, 26 Feb 2023 06:48:30 +0000

QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishandled).

The post CVE-2018-20216 appeared first on CVE Vulnerability.

CVE-2018-16643

Sun, 26 Feb 2023 06:47:08 +0000

The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0.8-4 do not check the return value of the fputc function, which allows remote attackers to cause a denial of service via a crafted image file.

The post CVE-2018-16643 appeared first on CVE Vulnerability.

CVE-2018-14622

Sun, 26 Feb 2023 06:46:23 +0000

A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an rpc-based application to crash by flooding it with new connections.

The post CVE-2018-14622 appeared first on CVE Vulnerability.

CVE-2018-14367

Sun, 26 Feb 2023 06:46:17 +0000

In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition.

The post CVE-2018-14367 appeared first on CVE Vulnerability.

CVE-2020-5359

Sun, 26 Feb 2023 06:42:18 +0000

Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to modify and corrupt the encrypted data.

The post CVE-2020-5359 appeared first on CVE Vulnerability.

CVE-2020-4531

Sun, 26 Feb 2023 06:42:02 +0000

IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 182715.

The post CVE-2020-4531 appeared first on CVE Vulnerability.

CVE-2020-27898

Sun, 26 Feb 2023 06:40:29 +0000

A denial of service issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1. An attacker may be able to bypass Managed Frame Protection.

The post CVE-2020-27898 appeared first on CVE Vulnerability.

CVE-2020-15191

Sun, 26 Feb 2023 06:37:44 +0000

In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes an invalid argument to `dlpack.to_dlpack` the expected validations will cause variables to bind to `nullptr` while setting a `status` variable to the error condition. However, this `status` argument is not properly checked. Hence, code following these methods will bind references to null pointers. This is undefined behavior and reported as an error if compiling with `-fsanitize=null`. The issue is patched in commit 22e07fb204386768e5bcbea563641ea11f96ceb8 and is released in TensorFlow versions 2.2.1, or 2.3.1.

The post CVE-2020-15191 appeared first on CVE Vulnerability.

CVE-2020-12372

Sun, 26 Feb 2023 06:36:34 +0000

Unchecked return value in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access.

The post CVE-2020-12372 appeared first on CVE Vulnerability.

CVE-2019-9704

Sun, 26 Feb 2023 06:35:03 +0000

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked.

The post CVE-2019-9704 appeared first on CVE Vulnerability.