Search CVE reports
3311 – 3320 of 44448 results
Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an unknown cipher suite from the peer, a NULL dereference occurs. Impact summary: A NULL pointer dereference leads...
4 affected packages
openssl, openssl1.0, nodejs, edk2
| Package | 18.04 LTS |
|---|---|
| openssl | Not affected |
| openssl1.0 | Not affected |
| nodejs | Needs evaluation |
| edk2 | Not affected |
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of...
4 affected packages
openssl, openssl1.0, nodejs, edk2
| Package | 18.04 LTS |
|---|---|
| openssl | Not affected |
| openssl1.0 | Not affected |
| nodejs | Needs evaluation |
| edk2 | Not affected |
Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer...
4 affected packages
openssl, openssl1.0, nodejs, edk2
| Package | 18.04 LTS |
|---|---|
| openssl | Not affected |
| openssl1.0 | Not affected |
| nodejs | Needs evaluation |
| edk2 | Not affected |
AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version 3.27.7, an XML External Entity (XXE) vulnerability exists...
1 affected package
assertj-core
| Package | 18.04 LTS |
|---|---|
| assertj-core | Needs evaluation |
A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a...
1 affected package
gnutls28
| Package | 18.04 LTS |
|---|---|
| gnutls28 | Needs evaluation |
A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with root privileges and...
1 affected package
network-manager
| Package | 18.04 LTS |
|---|---|
| network-manager | Vulnerable |
A security vulnerability has been detected in GPAC up to 2.4.0. This affects the function gf_text_import_srt_bifs of the file src/scene_manager/text_to_bifs.c of the component SRT Subtitle Import. Such manipulation leads to...
1 affected package
gpac
| Package | 18.04 LTS |
|---|---|
| gpac | Needs evaluation |
A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dump_isom_rtp of the file applications/mp4box/filedump.c. This manipulation causes null pointer dereference. The attack needs to...
1 affected package
gpac
| Package | 18.04 LTS |
|---|---|
| gpac | Needs evaluation |
A security flaw has been discovered in GPAC up to 2.4.0. Affected by this vulnerability is the function DumpMovieInfo of the file applications/mp4box/filedump.c. The manipulation results in null pointer dereference. The attack...
1 affected package
gpac
| Package | 18.04 LTS |
|---|---|
| gpac | Needs evaluation |
A vulnerability was identified in GPAC up to 2.4.0. Affected is the function gf_media_export_webvtt_metadata of the file src/media_tools/media_export.c. The manipulation of the argument Name leads to null pointer dereference. The...
1 affected package
gpac
| Package | 18.04 LTS |
|---|---|
| gpac | Needs evaluation |