CWE-789 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-789/ Sun, 26 Feb 2023 09:09:09 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-789 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-789/ 32 32 CVE-2008-1708 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-1708/ Sun, 26 Feb 2023 09:09:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-1708/ IBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of memory to allocate, which allows remote attackers to cause a denial of service (daemon exit) via a packet with a large value in this field.

The post CVE-2008-1708 appeared first on CVE Vulnerability.

]]> IBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of memory to allocate, which allows remote attackers to cause a denial of service (daemon exit) via a packet with a large value in this field.

The post CVE-2008-1708 appeared first on CVE Vulnerability.

]]> CVE-2008-0977 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0977/ Sun, 26 Feb 2023 09:08:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0977/ Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon crash) via a certain long packet that triggers an attempt to allocate a large amount of memory.

The post CVE-2008-0977 appeared first on CVE Vulnerability.

]]> Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon crash) via a certain long packet that triggers an attempt to allocate a large amount of memory.

The post CVE-2008-0977 appeared first on CVE Vulnerability.

]]> CVE-2021-34867 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-34867/ Thu, 23 Feb 2023 14:10:22 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-34867/ This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of […]

The post CVE-2021-34867 appeared first on CVE Vulnerability.

]]> This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of user-supplied data, which can result in an uncontrolled memory allocation. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-13672.

The post CVE-2021-34867 appeared first on CVE Vulnerability.

]]> CVE-2021-34868 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-34868/ Thu, 23 Feb 2023 14:10:22 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-34868/ This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of […]

The post CVE-2021-34868 appeared first on CVE Vulnerability.

]]> This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of user-supplied data, which can result in an uncontrolled memory allocation. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-13712.

The post CVE-2021-34868 appeared first on CVE Vulnerability.

]]> CVE-2021-34869 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-34869/ Thu, 23 Feb 2023 14:10:22 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-34869/ This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of […]

The post CVE-2021-34869 appeared first on CVE Vulnerability.

]]> This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of user-supplied data, which can result in an uncontrolled memory allocation. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-13797.

The post CVE-2021-34869 appeared first on CVE Vulnerability.

]]> CVE-2021-1568 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-1568/ Thu, 23 Feb 2023 14:06:30 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-1568/ A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to uncontrolled memory allocation. An attacker could exploit this vulnerability by copying a crafted file to a specific folder on the system. A […]

The post CVE-2021-1568 appeared first on CVE Vulnerability.

]]> A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to uncontrolled memory allocation. An attacker could exploit this vulnerability by copying a crafted file to a specific folder on the system. A successful exploit could allow the attacker to crash the VPN Agent service when the affected application is launched, causing it to be unavailable to all users of the system. To exploit this vulnerability, the attacker must have valid credentials on a multiuser Windows system.

The post CVE-2021-1568 appeared first on CVE Vulnerability.

]]> CVE-2021-1283 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-1283/ Thu, 23 Feb 2023 14:06:25 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-1283/ A vulnerability in the logging subsystem of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is written to system log files. An attacker could exploit this […]

The post CVE-2021-1283 appeared first on CVE Vulnerability.

]]> A vulnerability in the logging subsystem of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is written to system log files. An attacker could exploit this vulnerability by authenticating to an affected device and inspecting a specific system log file. A successful exploit could allow the attacker to view sensitive information in the system log file. To exploit this vulnerability, the attacker would need to have valid user credentials.

The post CVE-2021-1283 appeared first on CVE Vulnerability.

]]> CVE-2022-4741 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-4741/ Thu, 23 Feb 2023 05:21:44 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-4741/ A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 is able to address this issue. The name of the patch is 42bcff666855ab978e67a9041d0cdea552f20301. It is recommended to upgrade the […]

The post CVE-2022-4741 appeared first on CVE Vulnerability.

]]> A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 is able to address this issue. The name of the patch is 42bcff666855ab978e67a9041d0cdea552f20301. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216779.

The post CVE-2022-4741 appeared first on CVE Vulnerability.

]]> CVE-2022-31804 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-31804/ Thu, 23 Feb 2023 05:18:57 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-31804/ The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which may lead to a crash of the Gateway due to an out-of-memory condition.

The post CVE-2022-31804 appeared first on CVE Vulnerability.

]]> The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which may lead to a crash of the Gateway due to an out-of-memory condition.

The post CVE-2022-31804 appeared first on CVE Vulnerability.

]]> CVE-2022-22188 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-22188/ Thu, 23 Feb 2023 05:02:45 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-22188/ An Uncontrolled Memory Allocation vulnerability leading to a Heap-based Buffer Overflow in the packet forwarding engine (PFE) of Juniper Networks Junos OS allows a network-based unauthenticated attacker to flood the device with traffic leading to a Denial of Service (DoS). The device must be configured with storm control profiling limiting the number of unknown broadcast, […]

The post CVE-2022-22188 appeared first on CVE Vulnerability.

]]> An Uncontrolled Memory Allocation vulnerability leading to a Heap-based Buffer Overflow in the packet forwarding engine (PFE) of Juniper Networks Junos OS allows a network-based unauthenticated attacker to flood the device with traffic leading to a Denial of Service (DoS). The device must be configured with storm control profiling limiting the number of unknown broadcast, multicast, or unicast traffic to be vulnerable to this issue. This issue affects: Juniper Networks Junos OS on QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series; 20.2 version 20.2R1 and later versions prior to 20.2R2. This issue does not affect: Juniper Networks Junos OS versions prior to 20.2R1.

The post CVE-2022-22188 appeared first on CVE Vulnerability.

]]>