deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-20145
Published: 2023-08-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-14834. Reason: This candidate is a reservation duplicate of CVE-2019-14834. Notes: All CVE users should reference CVE-2019-14834 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2020-20813
Published: 2023-08-22
Description: Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.freebuf.com/vuls/215171.html; https://www.freebuf.com/vuls/215171.html
CVE: CVE-2020-21047
Published: 2023-08-22
Description: The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://lists.debian.org/debian-lts-announce/2023/09/msg00026.html; https://sourceware.org/bugzilla/show_bug.cgi?id=25068; https://sourceware.org/git/?p=elfutils.git%3Ba=commitdiff%3Bh=99dc63b10b3878616b85df2dfd2e4e7103e414b8
CVE: CVE-2020-21426
Published: 2023-08-22
Description: Buffer Overflow vulnerability in function C_IStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RUEK2JOVJBQZVNQIIZZO3JFMTVB4R5KS/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGOMCRAANNCQYJYPPMGRQWKRZGIP6NME/; https://sourceforge.net/p/freeimage/bugs/300/
CVE: CVE-2020-21427
Published: 2023-08-22
Description: Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://lists.debian.org/debian-lts-announce/2023/11/msg00020.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RUEK2JOVJBQZVNQIIZZO3JFMTVB4R5KS/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGOMCRAANNCQYJYPPMGRQWKRZGIP6NME/
CVE: CVE-2020-21428
Published: 2023-08-22
Description: Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://lists.debian.org/debian-lts-announce/2023/11/msg00020.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RUEK2JOVJBQZVNQIIZZO3JFMTVB4R5KS/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGOMCRAANNCQYJYPPMGRQWKRZGIP6NME/
CVE: CVE-2020-21469
Published: 2023-08-22
Description: An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. NOTE: this is disputed by the vendor because untrusted users cannot send SIGHUP signals; they can only be sent by a PostgreSQL superuser, a user with pg_reload_conf access, or a user with sufficient privileges at the OS level (the postgres account or the root account).
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-120
References: https://www.postgresql.org/message-id/CAA8ZSMqAHDCgo07hqKoM5XJaoQy6Vv76O7966agez4ffyQktkA%40mail.gmail.com; https://www.postgresql.org/message-id/flat/CAA8ZSMqAHDCgo07hqKoM5XJaoQy6Vv76O7966agez4ffyQktkA%40mail.gmail.com; https://www.postgresql.org/support/security/
CVE: CVE-2020-21490
Published: 2023-08-22
Description: An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://sourceware.org/bugzilla/show_bug.cgi?id=25249; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=378fd436405b3051df34ac995b2e03fe1f3d1907
CVE: CVE-2020-21528
Published: 2023-08-22
Description: A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.
CVSS Score: 5.5 (MEDIUM)
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392637; https://security.gentoo.org/glsa/202312-09; https://bugzilla.nasm.us/show_bug.cgi?id=3392637
CVE: CVE-2020-21583
Published: 2023-08-22
Description: An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786804; https://packetstormsecurity.com/files/132061/hwclock-Privilege-Escalation.html; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786804
CVE: CVE-2020-21679
Published: 2023-08-22
Description: Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://sourceforge.net/p/graphicsmagick/bugs/619/; https://sourceforge.net/p/graphicsmagick/bugs/619/
CVE: CVE-2020-21685
Published: 2023-08-22
Description: Buffer Overflow vulnerability in hash_findi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392644; https://bugzilla.nasm.us/show_bug.cgi?id=3392644
CVE: CVE-2020-21686
Published: 2023-08-22
Description: A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-562
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392643; https://bugzilla.nasm.us/show_bug.cgi?id=3392643
CVE: CVE-2020-21687
Published: 2023-08-22
Description: Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392645; https://bugzilla.nasm.us/show_bug.cgi?id=3392645
CVE: CVE-2020-21699
Published: 2023-08-22
Description: The web server Tengine 2.2.2 developed in the Nginx version from 0.5.6 thru 1.13.2 is vulnerable to an integer overflow vulnerability in the nginx range filter module, resulting in the leakage of potentially sensitive information triggered by specially crafted requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/ZxDecide/Nginx-variants/blob/master/%E9%99%84%E4%BB%B6%28Tengine%29.docx; https://github.com/ZxDecide/Nginx-variants/blob/master/%E9%99%84%E4%BB%B6%28Tengine%29.docx
CVE: CVE-2020-21710
Published: 2023-08-22
Description: A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://bugs.ghostscript.com/show_bug.cgi?id=701843; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=4e713293de84b689c4ab358f3e110ea54aa81925; https://lists.debian.org/debian-lts-announce/2023/09/msg00029.html
CVE: CVE-2020-21722
Published: 2023-08-22
Description: Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://github.com/xiaoxiongwang/security/tree/master/oggvideotools#segv-and-heap-use-after-free-detected-in-line-17-of-streamextractorcpp; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5E3JKOO7D6Y2SW2TQB5JDVG7I4Y3UFGW/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LO6NXK73PNR4KAAHLXAGPWJAPP772IOD/
CVE: CVE-2020-21723
Published: 2023-08-22
Description: A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service (crash) via opening of crafted ogg file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/xiaoxiongwang/security/tree/master/oggvideotools#segv-occurs-in-function-streamserializerextractstreams-in-streamserializercpp; https://sourceforge.net/p/oggvideotools/bugs/10/; https://github.com/xiaoxiongwang/security/tree/master/oggvideotools#segv-occurs-in-function-streamserializerextractstreams-in-streamserializercpp
CVE: CVE-2020-21724
Published: 2023-08-22
Description: Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/xiaoxiongwang/security/tree/master/oggvideotools#segv-and-heap-overflow-detected-in-line-17-of-streamextractorcpp; https://sourceforge.net/p/oggvideotools/bugs/9/; https://github.com/xiaoxiongwang/security/tree/master/oggvideotools#segv-and-heap-overflow-detected-in-line-17-of-streamextractorcpp
CVE: CVE-2020-21890
Published: 2023-08-22
Description: Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://bugs.ghostscript.com/show_bug.cgi?id=701846; https://lists.debian.org/debian-lts-announce/2023/09/msg00029.html; https://bugs.ghostscript.com/show_bug.cgi?id=701846
CVE: CVE-2020-21896
Published: 2023-08-22
Description: A Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: http://www.ghostscript.com/cgi-bin/findgit.cgi?8719e07834d6a72b6b4131539e49ed1e8e2ff79e; https://bugs.ghostscript.com/show_bug.cgi?id=701294; https://bugs.ghostscript.com/show_bug.cgi?id=701294
CVE: CVE-2020-22181
Published: 2023-08-22
Description: A reflected cross site scripting (XSS) vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command.cgi
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gusrmsdlrh/Vulner/blob/master/Sww-3400rw.md; https://security.samsungmobile.com/securityUpdate.smsb; https://github.com/gusrmsdlrh/Vulner/blob/master/Sww-3400rw.md
CVE: CVE-2020-22217
Published: 2023-08-22
Description: Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: https://github.com/c-ares/c-ares/issues/333; https://lists.debian.org/debian-lts-announce/2023/09/msg00014.html; https://github.com/c-ares/c-ares/issues/333
CVE: CVE-2020-22218
Published: 2023-08-22
Description: An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/libssh2/libssh2/pull/476; https://lists.debian.org/debian-lts-announce/2023/09/msg00006.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-22219
Published: 2023-08-22
Description: Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/xiph/flac/issues/215; https://lists.debian.org/debian-lts-announce/2023/09/msg00028.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZD2AJTU4PCJQP7HPTS2L2ELJWBASCRGD/
CVE: CVE-2020-22524
Published: 2023-08-22
Description: Buffer Overflow vulnerability in FreeImage_Load function in FreeImage Library 3.19.0(r1828) allows attackers to cuase a denial of service via crafted PFM file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://lists.debian.org/debian-lts-announce/2023/11/msg00020.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RUEK2JOVJBQZVNQIIZZO3JFMTVB4R5KS/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGOMCRAANNCQYJYPPMGRQWKRZGIP6NME/
CVE: CVE-2020-22570
Published: 2023-08-22
Description: Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted meta command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-77
References: https://github.com/memcached/memcached/issues/636; https://github.com/memcached/memcached/issues/636
CVE: CVE-2020-22628
Published: 2023-08-22
Description: Buffer Overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/LibRaw/LibRaw/issues/269; https://lists.debian.org/debian-lts-announce/2023/09/msg00007.html; https://github.com/LibRaw/LibRaw/issues/269
CVE: CVE-2020-22916
Published: 2023-08-22
Description: An issue discovered in XZ 5.2.5 allows attackers to cause a denial of service via decompression of a crafted file. NOTE: the vendor disputes the claims of "endless output" and "denial of service" because decompression of the 17,486 bytes always results in 114,881,179 bytes, which is often a reasonable size increase.
CVSS Score: 5.5 (MEDIUM)
References: http://web.archive.org/web/[PII_REDACTED]4612/https://github.com/snappyJack/CVE-request-XZ-5.2.5-has-denial-of-service-vulnerability; https://bugzilla.redhat.com/show_bug.cgi?id=2234987; https://bugzilla.suse.com/show_bug.cgi?id=1214590
CVE: CVE-2020-23793
Published: 2023-08-22
Description: An issue was discovered in spice-server spice-server-0.14.0-6.el7_6.1.x86_64 of Redhat's VDI product. There is a security vulnerablility that can restart KVMvirtual machine without any authorization. It is not yet known if there will be other other effects.
CVSS Score: 8.6 (HIGH)
CWE: CWE-862
References: https://github.com/zelat/spice-security-issues; https://github.com/zelat/spice-security-issues
CVE: CVE-2020-23804
Published: 2023-08-22
Description: Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://gitlab.freedesktop.org/poppler/poppler/-/issues/936; https://lists.debian.org/debian-lts-announce/2023/10/msg00022.html; https://gitlab.freedesktop.org/poppler/poppler/-/issues/936
CVE: CVE-2020-23992
Published: 2023-08-22
Description: Cross Site Scripting (XSS) in Nagios XI 5.7.1 allows remote attackers to run arbitrary code via returnUrl parameter in a crafted GET request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/EmreOvunc/Nagios-XI-Reflected-XSS; https://github.com/EmreOvunc/Nagios-XI-Reflected-XSS
CVE: CVE-2020-24292
Published: 2023-08-22
Description: Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted ico file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFRQ76ZDPSWT7OH6FJDLSFWBXVBE6JDN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6GKMK74POW3RU7F4HLUJE7XEFLQDO35/; https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/
CVE: CVE-2020-24293
Published: 2023-08-22
Description: Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to run arbitrary code via opening of crafted psd file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFRQ76ZDPSWT7OH6FJDLSFWBXVBE6JDN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6GKMK74POW3RU7F4HLUJE7XEFLQDO35/; https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/
CVE: CVE-2020-24294
Published: 2023-08-22
Description: Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 [r1859] allows remote attackers to cuase a denial of service via opening of crafted psd file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/; https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/
CVE: CVE-2020-24295
Published: 2023-08-22
Description: Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine() in FreeImage 3.19.0 [r1859] allows remote attackers to ru narbitrary code via use of crafted psd file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFRQ76ZDPSWT7OH6FJDLSFWBXVBE6JDN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6GKMK74POW3RU7F4HLUJE7XEFLQDO35/; https://sourceforge.net/p/freeimage/discussion/36111/thread/afb98701eb/
CVE: CVE-2020-25887
Published: 2023-08-22
Description: Buffer overflow in mg_resolve_from_hosts_file in Mongoose 6.18, when reading from a crafted hosts file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://github.com/cesanta/mongoose/issues/1140; https://github.com/cesanta/mongoose/issues/1140
CVE: CVE-2020-26652
Published: 2023-08-22
Description: An issue was discovered in function nl80211_send_chandef in rtl8812au v5.6.4.2 allows attackers to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/aircrack-ng/rtl8812au/issues/730; https://github.com/aircrack-ng/rtl8812au/issues/730
CVE: CVE-2020-26683
Published: 2023-08-22
Description: A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://bugs.ghostscript.com/show_bug.cgi?id=702566; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=05720b4ee3dbae57e65546dc2eecc3021c08eeea; https://bugs.ghostscript.com/show_bug.cgi?id=702566
CVE: CVE-2020-27418
Published: 2023-08-22
Description: A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon_invert_region() function.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-416
References: http://fedora.com; https://patchwork.freedesktop.org/patch/356372/; http://fedora.com
CVE: CVE-2020-35342
Published: 2023-08-22
Description: GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak.
CVSS Score: 7.5 (HIGH)
CWE: CWE-665
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://sourceware.org/bugzilla/show_bug.cgi?id=25319; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-35357
Published: 2023-08-22
Description: A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_sorted_data of the library may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://git.savannah.gnu.org/cgit/gsl.git/commit/?id=989a193268b963aa1047814f7f1402084fb7d859; https://lists.debian.org/debian-lts-announce/2023/09/msg00023.html; https://savannah.gnu.org/bugs/?59624
CVE: CVE-2021-29390
Published: 2023-08-22
Description: libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1943797; https://github.com/libjpeg-turbo/libjpeg-turbo/blob/4e52b66f342a803d3b8099b79607e3158d3a241c/jdcoefct.c#L595; https://github.com/libjpeg-turbo/libjpeg-turbo/commits/main/jdcoefct.c
CVE: CVE-2021-30047
Published: 2023-08-22
Description: VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed.
CVSS Score: 7.5 (HIGH)
References: https://www.exploit-db.com/exploits/49719; https://www.exploit-db.com/exploits/49719
CVE: CVE-2021-32292
Published: 2023-08-22
Description: An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/json-c/json-c/issues/654; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.debian.org/security/2023/dsa-5486
CVE: CVE-2021-32420
Published: 2023-08-22
Description: dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://gitlab.com/aplevich/dpic/-/commit/d317e4066c17f9ceb359b3af13264c32f6fb43cf; https://gitlab.com/aplevich/dpic/-/issues/5; https://gitlab.com/aplevich/dpic/-/commit/d317e4066c17f9ceb359b3af13264c32f6fb43cf
CVE: CVE-2021-32421
Published: 2023-08-22
Description: dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://gitlab.com/aplevich/dpic/-/commit/d317e4066c17f9ceb359b3af13264c32f6fb43cf; https://gitlab.com/aplevich/dpic/-/issues/7; https://gitlab.com/aplevich/dpic/-/commit/d317e4066c17f9ceb359b3af13264c32f6fb43cf
CVE: CVE-2021-32422
Published: 2023-08-22
Description: dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://gitlab.com/aplevich/dpic/-/commit/d317e4066c17f9ceb359b3af13264c32f6fb43cf; https://gitlab.com/aplevich/dpic/-/issues/6; https://gitlab.com/aplevich/dpic/-/commit/d317e4066c17f9ceb359b3af13264c32f6fb43cf
CVE: CVE-2021-33388
Published: 2023-08-22
Description: dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://gitlab.com/aplevich/dpic/-/issues/8; https://gitlab.com/aplevich/dpic/-/issues/8
CVE: CVE-2021-33390
Published: 2023-08-22
Description: dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y. A different vulnerablility than CVE-2021-32421.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://gitlab.com/aplevich/dpic/-/issues/10; https://gitlab.com/aplevich/dpic/-/issues/10
CVE: CVE-2021-34193
Published: 2023-08-22
Description: Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27719; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28185; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28383