Browse CVEs

MEDIUM 6.5 CVE-2020-22037 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c. Debian Linux Patch available Fix from $1,6002021-06-01 MEDIUM 6.5 CVE-2020-22038 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c. Ffmpeg No fix yet Fix from $1,6002021-06-01 MEDIUM 6.5 CVE-2020-22039 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function. Ffmpeg No fix yet Fix from $1,6002021-06-01 MEDIUM 6.5 CVE-2020-22040 A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c. Ffmpeg No fix yet Fix from $1,6002021-06-01 MEDIUM 6.5 CVE-2020-22041 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags function in buffersrc. Debian Linux No fix yet Fix from $1,6002021-06-01 MEDIUM 6.5 CVE-2020-22042 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filter_inouts function in libavfi… Debian Linux No fix yet Fix from $1,6002021-06-01 MEDIUM 6.5 CVE-2020-22043 A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c. Ffmpeg No fix yet Fix from $1,6002021-06-01 HIGH 7.5 CVE-2021-20237 An uncontrolled resource consumption (memory leak) flaw was found in ZeroMQ's src/xpub.cpp in versions before 4.3.3. This flaw allows a remote unauth… Libzmq 4.3.3+ Fix from $1,9502021-05-28 HIGH 7.5 CVE-2021-28651EPSS 7% An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a buffer-management bug, it allows a denial of service. When resolving a re… Debian Linux 4.15 / 5.0.6+ Fix from $1,9502021-05-27 HIGH 7.5 CVE-2020-25672 A memory leak vulnerability was found in Linux kernel in llcp_sock_connect Linux Kernel Patch available Fix from $1,9502021-05-25 HIGH 7.5 CVE-2021-20209 A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured. Privoxy 3.0.29+ Fix from $1,9502021-05-25 HIGH 7.5 CVE-2020-20451 Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c. Debian Linux Patch available Fix from $1,9502021-05-25 HIGH 7.5 CVE-2021-32032 In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation (in the event of a failure) can preven… Trusted Firmware M after 1.3.0 Fix from $1,9502021-05-21 MEDIUM 6.5 CVE-2020-21839 An issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in dwg_decode_eed ../../src/decode.c:3638. Libredwg Patch available Fix from $1,6002021-05-17 HIGH 7.5 CVE-2021-27386 A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIM… Simatic Wincc Runtime Advanced 15.1 / 16+ Fix from $1,9502021-05-12 HIGH 7.5 CVE-2021-28665 Stormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in the SNMP plugin that can lead to excessive consumptio… Network Security 3.7.18 / 3.11.5+ Fix from $1,9502021-05-06 MEDIUM 6.5 CVE-2021-0272 A kernel memory leak in QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016 devices Flexible PIC Concentrators (FPCs) on Juniper Networks Ju… Junos Mitigation only Fix from $1,6002021-04-22 MEDIUM 6.5 CVE-2021-0257 On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs (Modular Port Concentrators) where Integrated Routing and Bridging (IR… Junos Mitigation only Fix from $1,6002021-04-22 HIGH 7.5 CVE-2021-0230 On Juniper Networks SRX Series devices with link aggregation (lag) configured, executing any operation that fetches Aggregated Ethernet (AE) interfac… Junos Mitigation only Fix from $1,9502021-04-22 MEDIUM 5.5 CVE-2021-31256 Memory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. Gpac Patch available Fix from $1,6002021-04-19 HIGH 7.8 CVE-2021-3492 Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() corre… Ubuntu Linux 18.04 / 20.04+ Fix from $1,9502021-04-17 MEDIUM 6.5 CVE-2021-22312 There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific mes… Ips Module Firmware Mitigation only Fix from $1,6002021-04-08 HIGH 8.8 CVE-2021-1309 Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthentica… Rv132w Firmware Mitigation only Fix from $1,9502021-04-08 HIGH 7.4 CVE-2021-1251 Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthentica… Rv132w Firmware Mitigation only Fix from $1,9502021-04-08 HIGH 7.4 CVE-2021-1308 Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthentica… Rv132w Firmware Mitigation only Fix from $1,9502021-04-08 HIGH 7.5 CVE-2020-11255 Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and rest of the memory i… Apq8009 Firmware Mitigation only Fix from $1,9502021-04-07 MEDIUM 5.5 CVE-2020-36312 An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure, ak… Linux Kernel 5.8.10+ Fix from $1,6002021-04-07 HIGH 7.5 CVE-2021-30141 Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted… Friendica after 2021.01 Fix from $1,9502021-04-05 MEDIUM 6.2 CVE-2021-30002 An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. video_usercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a m… Linux Kernel 5.11.3+ Fix from $1,6002021-04-02 MEDIUM 6.5 CVE-2021-20234 An uncontrolled resource consumption (memory leak) flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a … Libzmq 4.3.3+ Fix from $1,6002021-04-01