Vulnerabilidades do Netapp Ontap Select Deploy Administration Utility

CVE-2021-3177 Crítica · 9.8 CWE-120 19/01/2021

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.

CVE-2019-25013 Média · 5.9 CWE-125 04/01/2021

The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid...

The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.

CVE-2020-35507 Média · 5.5 CWE-476 04/01/2021

NULL Pointer Dereference em Gnu Binutils

There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability.

CVE-2020-35496 Média · 5.5 CWE-476 04/01/2021

NULL Pointer Dereference em Gnu Binutils

There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34.

CVE-2020-35495 Média · 5.5 CWE-476 04/01/2021

NULL Pointer Dereference em Gnu Binutils

There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34.

CVE-2020-35494 Média · 6.1 CWE-908 04/01/2021

Use of Uninitialized Resource em Gnu Binutils

There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34.

CVE-2020-35493 Média · 5.5 CWE-20 04/01/2021

Improper Input Validation em Gnu Binutils

A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.

CVE-2020-15999 Crítica · 9.6 KEV Alta · 66 Exploit público CWE-787 03/11/2020

Google Chrome FreeType Heap Buffer Overflow Vulnerability

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2020-14145 Média · 5.9 CWE-203 29/06/2020

The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an...

The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.

CVE-2020-14155 Média · 5.3 CWE-190 15/06/2020

Integer Overflow or Wraparound em Pcre

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.

CVE-2020-13871 Alta · 7.5 CWE-416 06/06/2020

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite...

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.

CVE-2020-11656 Crítica · 9.8 CWE-416 09/04/2020

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by...

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

CVE-2020-11655 Alta · 7.5 CWE-665 09/04/2020

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a...

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

CVE-2019-20388 Alta · 7.5 CWE-401 21/01/2020

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.

CVE-2019-19956 Alta · 7.5 CWE-401 24/12/2019

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related...

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.

CVE-2019-19646 Crítica · 9.8 CWE-754 09/12/2019

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in...

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

CVE-2019-19603 Alta · 7.5 09/12/2019

SQLite 3.30.1, during handling of CREATE TABLE and CREATE VIEW statements, does not consider...

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.

CVE-2019-19645 Média · 5.5 CWE-674 09/12/2019

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types...

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

CVE-2019-19317 Crítica · 9.8 CWE-681 05/12/2019

lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a...

lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.

CVE-2019-17498 Alta · 8.1 CWE-190 21/10/2019

In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer...

In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.

CVE-2019-16168 Média · 6.5 CWE-369 09/09/2019

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other...

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."

CVE-2019-3861 Crítica · 9.1 CWE-125 25/03/2019

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a...

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

CVE-2019-3860 Crítica · 9.1 CWE-125 25/03/2019

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with...

An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.

CVE-2019-3857 Alta · 8.8 CWE-190 25/03/2019

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

CVE-2019-3856 Alta · 8.8 CWE-190 25/03/2019

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2...

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.