Netapp Ontap Select Deploy Administration Utility vulnerabilities

CVE-2021-3177 Critical · 9.8 CWE-120 Jan 19, 2021

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.

CVE-2019-25013 Medium · 5.9 CWE-125 Jan 4, 2021

The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid...

The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.

CVE-2020-35507 Medium · 5.5 CWE-476 Jan 4, 2021

NULL Pointer Dereference in Gnu Binutils

There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability.

CVE-2020-35496 Medium · 5.5 CWE-476 Jan 4, 2021

NULL Pointer Dereference in Gnu Binutils

There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34.

CVE-2020-35495 Medium · 5.5 CWE-476 Jan 4, 2021

NULL Pointer Dereference in Gnu Binutils

There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34.

CVE-2020-35494 Medium · 6.1 CWE-908 Jan 4, 2021

Use of Uninitialized Resource in Gnu Binutils

There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34.

CVE-2020-35493 Medium · 5.5 CWE-20 Jan 4, 2021

Improper Input Validation in Gnu Binutils

A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.

CVE-2020-15999 Critical · 9.6 KEV High · 66 Public exploit CWE-787 Nov 3, 2020

Google Chrome FreeType Heap Buffer Overflow Vulnerability

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-14145 Medium · 5.9 CWE-203 Jun 29, 2020

The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an...

The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.

CVE-2020-14155 Medium · 5.3 CWE-190 Jun 15, 2020

Integer Overflow or Wraparound in Pcre

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.

CVE-2020-13871 High · 7.5 CWE-416 Jun 6, 2020

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite...

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.

CVE-2020-11656 Critical · 9.8 CWE-416 Apr 9, 2020

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by...

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

CVE-2020-11655 High · 7.5 CWE-665 Apr 9, 2020

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a...

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

CVE-2019-20388 High · 7.5 CWE-401 Jan 21, 2020

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.

CVE-2019-19956 High · 7.5 CWE-401 Dec 24, 2019

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related...

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.

CVE-2019-19646 Critical · 9.8 CWE-754 Dec 9, 2019

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in...

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

CVE-2019-19603 High · 7.5 Dec 9, 2019

SQLite 3.30.1, during handling of CREATE TABLE and CREATE VIEW statements, does not consider...

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.

CVE-2019-19645 Medium · 5.5 CWE-674 Dec 9, 2019

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types...

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

CVE-2019-19317 Critical · 9.8 CWE-681 Dec 5, 2019

lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a...

lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.

CVE-2019-17498 High · 8.1 CWE-190 Oct 21, 2019

In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer...

In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.

CVE-2019-16168 Medium · 6.5 CWE-369 Sep 9, 2019

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other...

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."

CVE-2019-3861 Critical · 9.1 CWE-125 Mar 25, 2019

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a...

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

CVE-2019-3860 Critical · 9.1 CWE-125 Mar 25, 2019

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with...

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

CVE-2019-3857 High · 8.8 CWE-190 Mar 25, 2019

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

CVE-2019-3856 High · 8.8 CWE-190 Mar 25, 2019

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2...

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.