CVE-2019-25033 (unbound)
Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro. Devamını Oku
Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro. Devamını Oku
Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write. Devamını Oku
Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par. Devamını Oku
Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. Devamını Oku
Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet. Devamını Oku
Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. Devamını Oku
Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c. Devamını Oku
Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. Devamını Oku
Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. Devamını Oku
Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy. Devamını Oku
** DISPUTED ** An issue was discovered in Jansson through 2.13.1. Due to a parsing error in json_loads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification. Devamını Oku
IBM Spectrum Protect Plus File Systems Agent 10.1.6 and 10.1.7 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 198836. Devamını Oku