Browse CVEs

HIGH 7.8 CVE-2022-0361 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Debian Linux 8.2.4215 / 12.6+ Fix from $1,9502022-01-26 HIGH 7.8 CVE-2022-0359 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Debian Linux 8.2.4214 / 12.6+ Fix from $1,9502022-01-26 CRITICAL 9.8 CVE-2022-0318 Heap-based Buffer Overflow in vim/vim prior to 8.2. Debian Linux 8.2.4151 / 13.0+ Fix from $2,3002022-01-21 CRITICAL 9.8 CVE-2021-33912EPSS 10% libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated … Debian Linux 1.2.11+ Fix from $2,3002022-01-19 HIGH 7.8 CVE-2022-0261 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Debian Linux 8.2.4120 / 13.0+ Fix from $1,9502022-01-18 MEDIUM 6.6 CVE-2022-0213 vim is vulnerable to Heap-based Buffer Overflow Debian Linux 8.2+ Fix from $1,6002022-01-14 MEDIUM 5.5 CVE-2021-37530 A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c. Debian Linux after 3.2.8a Fix from $1,6002022-01-12 MEDIUM 5.5 CVE-2021-36410 A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when running program dec265. Debian Linux No fix yet Fix from $1,6002022-01-10 HIGH 7.8 CVE-2021-43579EPSS 7% A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim converts an HTML document linki… Debian Linux after 1.9.13 Fix from $1,9502022-01-10 MEDIUM 5.9 CVE-2022-22707EPSS 9% In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes repr… Debian Linux after 1.4.63 Fix from $1,6002022-01-06 MEDIUM 5.5 CVE-2021-45943 GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and … Debian Linux after 3.4.0 Fix from $1,6002022-01-01 MEDIUM 5.5 CVE-2021-45949 Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp). Debian Linux after 9.54.0 Fix from $1,6002022-01-01 HIGH 7.8 CVE-2021-45909 An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function. It allows an attacker to writ… Debian Linux No fix yet Fix from $1,9502021-12-28 HIGH 7.8 CVE-2021-45910 An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main function. It allows an attacker to write data outside … Debian Linux No fix yet Fix from $1,9502021-12-28 HIGH 7.8 CVE-2021-45911 An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow in the main function. It allows an attacker to write 2 bytes outside t… Debian Linux No fix yet Fix from $1,9502021-12-28 CRITICAL 9.8 CVE-2021-40393 An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) a… Debian Linux No fix yet Fix from $2,3002021-12-22 CRITICAL 9.8 CVE-2021-40394 An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) a… Debian Linux No fix yet Fix from $2,3002021-12-22 HIGH 8.8 CVE-2019-8922 A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is enough space in the destin… Debian Linux after 5.48 Fix from $1,9502021-11-29 CRITICAL 9.8 CVE-2021-44143 A flaw was found in mbsync in isync 1.4.0 through 1.4.3. Due to an unchecked condition, a malicious or compromised IMAP server could use a crafted ma… Debian Linux after 1.4.3 Fix from $2,3002021-11-22 HIGH 8.8 CVE-2021-21898 A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-cra… Debian Linux No fix yet Fix from $1,9502021-11-19 CRITICAL 9.8 CVE-2021-40391 An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forke… Debian Linux No fix yet Fix from $2,3002021-11-19 HIGH 7.5 CVE-2021-43174 NLnet Labs Routinator versions 0.9.0 up to and including 0.10.1, support the gzip transfer encoding when querying RRDP repositories. This encoding ca… Debian Linux 0.10.2+ Fix from $1,9502021-11-09 HIGH 7.8 CVE-2021-32272 An issue was discovered in faad2 before 2.10.0. A heap-buffer-overflow exists in the function stszin located in mp4read.c. It allows an attacker to c… Debian Linux 2.10.0+ Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32273 An issue was discovered in faad2 through 2.10.0. A stack-buffer-overflow exists in the function ftypin located in mp4read.c. It allows an attacker to… Debian Linux after 2.10.0 Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32274 An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_synthesis_64 located in sbr_qmf.c. It allows a… Debian Linux after 2.10.0 Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32277 An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function sbr_qmf_analysis_32 located in sbr_qmf.c. It allows an… Debian Linux after 2.10.0 Fix from $1,9502021-09-20 HIGH 7.8 CVE-2021-32278 An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function lt_prediction located in lt_predict.c. It allows an at… Debian Linux after 2.10.0 Fix from $1,9502021-09-20 HIGH 8.8 CVE-2020-21598 libde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploited via a crafted a file. Debian Linux No fix yet Fix from $1,9502021-09-16 MEDIUM 6.5 CVE-2020-21597 libde265 v1.0.4 contains a heap buffer overflow in the mc_chroma function, which can be exploited via a crafted a file. Debian Linux No fix yet Fix from $1,6002021-09-16 MEDIUM 6.5 CVE-2020-21599 libde265 v1.0.4 contains a heap buffer overflow in the de265_image::available_zscan function, which can be exploited via a crafted a file. Debian Linux No fix yet Fix from $1,6002021-09-16