Browse CVEs

MEDIUM 6.5 CVE-2021-45941 libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (8 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c). Libbpf No fix yet Fix from $1,6002022-01-01 MEDIUM 5.5 CVE-2021-45929 Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from CompileElseBlock and Compile_If). Wasm3 No fix yet Fix from $1,6002022-01-01 MEDIUM 5.5 CVE-2021-45946 Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from Compile_LoopOrBlock and CompileBlockStatements). Wasm3 No fix yet Fix from $1,6002022-01-01 MEDIUM 5.5 CVE-2021-45947 Wasm3 0.5.0 has an out-of-bounds write in Runtime_Release (called from EvaluateExpression and InitDataSegments). Wasm3 No fix yet Fix from $1,6002022-01-01 MEDIUM 5.5 CVE-2021-45948 Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in _m3d_safestr (called from m3d_load and Assimp::M3DWrapper:… Assimp No fix yet Fix from $1,6002022-01-01 MEDIUM 5.5 CVE-2021-45949 Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp). Debian Linux after 9.54.0 Fix from $1,6002022-01-01 MEDIUM 6.5 CVE-2021-45950 LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object). Libredwg after 0.12.4.4367 Fix from $1,6002022-01-01 CRITICAL 9.8 CVE-2021-45951 Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from check_for_bogus_wildcard and FuzzCheckForBogusWildcard). NOTE: the ve… Dnsmasq No fix yet Fix from $2,3002022-01-01 CRITICAL 9.8 CVE-2021-45952 Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp). NOTE: the vendor's position is that CVE-2021-4595… Dnsmasq No fix yet Fix from $2,3002022-01-01 CRITICAL 9.8 CVE-2021-45953 Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c). NOTE: the vendor's position is that CVE-2… Dnsmasq No fix yet Fix from $2,3002022-01-01 CRITICAL 9.8 CVE-2021-45954 Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth). NOTE: the vendor's position is that CVE-2021-45… Dnsmasq No fix yet Fix from $2,3002022-01-01 CRITICAL 9.8 CVE-2021-45955 Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a proper boun… Dnsmasq No fix yet Fix from $2,3002022-01-01 CRITICAL 9.8 CVE-2021-45956 Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply). NOTE: the vendor's position is that CVE-2021-4595… Dnsmasq No fix yet Fix from $2,3002022-01-01 CRITICAL 9.8 CVE-2021-45957 Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c). NOTE: the vendor's position is… Dnsmasq No fix yet Fix from $2,3002022-01-01 MEDIUM 5.5 CVE-2021-45958 UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for exa… Ultrajson 5.2.0+ Fix from $1,6002022-01-01 HIGH 7.8 CVE-2021-43554 FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker… Winproladder after 3.30_24518 Fix from $1,9502021-12-28 HIGH 7.8 CVE-2021-43556 FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an a… Winproladder after 3.30_24518 Fix from $1,9502021-12-28 HIGH 7.8 CVE-2021-45907 An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a for loop. An attacker has little influence over the data … Gif2apng No fix yet Fix from $1,9502021-12-28 HIGH 7.8 CVE-2021-45908 An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a while loop. An attacker has little influence over the dat… Gif2apng No fix yet Fix from $1,9502021-12-28 HIGH 7.8 CVE-2021-45909 An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function. It allows an attacker to writ… Debian Linux No fix yet Fix from $1,9502021-12-28 HIGH 7.8 CVE-2021-45910 An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main function. It allows an attacker to write data outside … Debian Linux No fix yet Fix from $1,9502021-12-28 HIGH 7.8 CVE-2021-45911 An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow in the main function. It allows an attacker to write 2 bytes outside t… Debian Linux No fix yet Fix from $1,9502021-12-28 HIGH 8.1 CVE-2021-45704 An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket<T> unconditi… Metrics Util 0.7.0+ Fix from $1,9502021-12-27 CRITICAL 9.8 CVE-2021-45707 An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplis… Nix 0.20.2 / 0.21.2+ Fix from $2,3002021-12-27 CRITICAL 9.8 CVE-2018-25025 An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly extend the lifetime of a string, leading to memory corruption. Actix Web 0.7.15+ Fix from $2,3002021-12-27 CRITICAL 9.8 CVE-2018-25026 An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can add the Send marker trait to an object that cannot be sent between thre… Actix Web 0.7.15+ Fix from $2,3002021-12-27 HIGH 7.5 CVE-2021-45680 An issue was discovered in the vec-const crate before 2.0.0 for Rust. It tries to construct a Vec from a pointer to a const slice, leading to memory … Vec Const 2.0.0+ Fix from $1,9502021-12-27 HIGH 7.5 CVE-2021-45681 An issue was discovered in the derive-com-impl crate before 0.1.2 for Rust. An invalid reference (and memory corruption) can occur because AddRef mig… Derive Com Impl 0.1.2+ Fix from $1,9502021-12-27 CRITICAL 9.8 CVE-2018-25024 An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly coerce an immutable reference into a mutable reference, leadi… Actix Web 0.7.15+ Fix from $2,3002021-12-27 HIGH 8.8 CVE-2021-45636 NETGEAR D7000 devices before 1.0.1.82 are affected by a stack-based buffer overflow by an unauthenticated attacker. D7000 Firmware 1.0.1.82+ Fix from $1,9502021-12-26