CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- mdbtools project mdbtools MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd0c689be0) in... 7.8 High
- mdbtools project mdbtools MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd6e029ee0) in... 7.8 High
- libjxl project libjxl libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds... 5.5 Medium
- harfbuzz project harfbuzz, fedoraproject fedora +1 more HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from... 6.5 Medium
- wolfssl wolfmqtt wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (4 bytes) in MqttDecode_Publish (called... 5.5 Medium
- wolfssl wolfmqtt wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (8 bytes) in MqttDecode_Publish (called... 5.5 Medium
- wolfssl wolfmqtt wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from... 5.5 Medium
- grok project grok Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress (called from... 5.5 Medium
- wolfssl wolfmqtt wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode_Disconnect (called from... 5.5 Medium
- wolfssl wolfmqtt wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from... 5.5 Medium
- wolfssl wolfmqtt wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from... 5.5 Medium
- wolfssl wolfmqtt wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from... 5.5 Medium
- libbpf project libbpf libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called... 6.5 Medium
- libbpf project libbpf libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (8 bytes) in __bpf_object__open (called... 6.5 Medium
- artifex ghostscript, debian linux +1 more Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from... 5.5 Medium
- wasm3 project wasm3 Wasm3 0.5.0 has an out-of-bounds write in Runtime_Release (called from EvaluateExpression and... 5.5 Medium
- artifex ghostscript, debian linux +1 more Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish ... 5.5 Medium
- gnu libredwg LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private ... 6.5 Medium
- thekelleys dnsmasq Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from... 9.8 Critical
- thekelleys dnsmasq Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp). 9.8 Critical
- thekelleys dnsmasq Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and... 9.8 Critical
- thekelleys dnsmasq Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and... 9.8 Critical
- thekelleys dnsmasq Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply). 9.8 Critical
- thekelleys dnsmasq Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest... 9.8 Critical
- ultrajson project ultrajson, debian linux, fedoraproject fedora +2 more UltraJSON vulnerable to Out-of-bounds Write 5.5 Medium
- thekelleys dnsmasq Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and... 9.8 Critical
- wasm3 project wasm3 Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from Compile_LoopOrBlock and... 5.5 Medium
- wasm3 project wasm3 Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from CompileElseBlock and... 5.5 Medium
- debian linux, linux kernel +1 more A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due... 5.5 Medium
- debian linux, linux kernel, red hat enterprise linux 6 +5 more +7 more Kernel: security regression for cve-2018-13405 4.4 Medium
-
c-blosc2OSS-Fuzz Heap-buffer-overflow in ZSTD_createDDict No score -
ghostscriptOSS-Fuzz UNKNOWN READ in pdfi_free_object No score -
stbOSS-Fuzz Global-buffer-overflow in stbi__jpeg_decode_block No score -
radare2OSS-Fuzz Segv on unknown address in r_buf_free No score - squid-cache squid, debian linux +1 more Important: squid:4 security update 6.5 Medium
- assimp Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in... 5.5 Medium
- osgeo gdal, debian linux, fedoraproject fedora +1 more +3 more GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile ... 5.5 Medium
- openexr, debian linux, fedoraproject fedora +2 more OpenEXR 3.1.0 through 3.1.3 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask:... 5.5 Medium
- debian linux, fedoraproject fedora, qt qtsvg +2 more Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate... 5.5 Medium
- linux kernel A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface ... 7.0 High
- debian linux, linux kernel, broadcom brocade fabric operating system firmware +6 more +8 more Important: kernel security, bug fix, and enhancement update 7.8 High
- vim, vim vim/vim, apple mac os x +3 more +5 more Out-of-bounds Read in vim/vim 5.5 Medium
- vim, vim vim/vim, apple mac os x +3 more +5 more Use After Free in vim/vim 5.5 Medium
- python, debian linux, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in... 5.3 Medium
- linux kernel Important: kernel security and bug fix update 5.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox.... 10.0 Critical
- samba, fedoraproject fedora, redhat storage +2 more MaxQueryDuration not honoured in Samba AD DC LDAP 6.5 Medium
- php UAF due to php_filter_float() failing 8.2 High
- leap bitmask riseup vpn Bitmask Riseup VPN 0.21.6 contains a local privilege escalation flaw due to improper access... 7.3 High
- netgear r6700 firmware Netgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the... 7.5 High
- Show olderLoading…