CWE-131: Incorrect Calculation of Buffer Size
The product does not correctly calculate the size to be used when allocating a buffer.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local...7.0 High
- gnu libtasn1, debian linux, f5 arx firmware +12 more +14 moreThe asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a...7.5 High
- php, apple mac os x, mac os x server +2 more +4 moreThe init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly...9.8 Critical
- invisible-island lynx, debian linux +1 moreStack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP...9.8 Critical
- gaim project gaimBuffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a...9.8 Critical
- haxx curl, libcurl +1 moreMultiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions,...8.8 High
- apache http server, hp hp-ux, openpkg +2 more +4 moreBuffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local...7.8 High
- apache http serverBuffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a ...7.8 High
- oracle application server, collaboration suite, database server +4 more +6 moreBuffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via...9.8 Critical
- heimdal project heimdal, debian linux +1 morek5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4...9.8 Critical
- acme thttpdBuffer overflow in defang in libhttpd.c for thttpd 2.21 to 2.23b1 allows remote attackers to...9.8 Critical
- cyrusimap cyrus sasl, apple mac os x, mac os x server +2 moreMultiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause...9.8 Critical
- sudo project sudo, debian linux +1 moreSudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow...7.8 High
- microsoft internet information serverFTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a...7.5 High
- oracle solaris, hp hp-ux, sgi irix +2 moreHeap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by...9.8 Critical
- hp hp-ux, sgi irix +1 moreBuffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by...9.8 Critical