CWE-193: Off-by-one Error
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
Also known as off-by-five.
A kind of CWE-682 Incorrect Calculation.
From the CWE List. © The MITRE Corporation.
Newest
- simple-slab project simple-slabOut of bounds read in simple-slab9.1 Critical
- secomea gatemanager, gatemanager 8250 firmware +1 moreOFF-BY-ONE ERROR CWE-1939.8 Critical
- secomea gatemanager, gatemanager 8250 firmware +1 moreOFF-BY-ONE ERROR CWE-1938.1 High
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before...7.8 High
- zephyrproject zephyrPacket length decoding error in MQTT9.0 Critical
- videolan vlc media playerAn off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player...7.8 High
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI...5.9 Medium
- openexr, apple icloud, ipados +9 more +11 moreAn issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the...5.5 Medium
- apple ios, ipados, macos +3 more +5 moreAn off by one issue existed in the handling of racoon configuration files. This issue was...7.8 High
- ossecIn OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec...9.8 Critical
- wireshark, fedoraproject fedora, opensuse leap +2 more +4 moreIn Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. This was addressed in epan...7.5 High
- bftpd project bftpdAn issue was discovered in Bftpd before 5.4. There is a heap-based off-by-one error during file...9.8 Critical
- openldap, debian linux +1 moreAn off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV...7.5 High
- cyrusimap cyrus-sasl, apache bookkeeper, apple ipados +19 more +21 morecyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote...7.5 High
- monopdOff-by-one error in the readBuf function in listener.cpp in libcapsinetwork and monopd before 0.9...7.5 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of...8.8 High
- sleuthkit the sleuth kit, fedoraproject fedora +1 moreAn issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an off-by-one overwrite due to an...9.8 Critical
- simple service discovery protocol responder project service discovery protocol responderSSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based...7.5 High
- linux kernelIn the Linux kernel before 2.6.34, a range check issue in drivers/gpu/drm/radeon/atombios.c could...7.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage...7.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage...7.8 High
- imagemagick, canonical ubuntu linux, debian linux +2 more +4 moreAn off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the...6.5 Medium
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can...9.8 Critical
- kaspersky lab ultravnc, siemens sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc +1 more +3 moreUltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with...9.8 Critical
- wireshark, canonical ubuntu linux, debian linux +1 more +3 moreIn Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash...5.5 Medium
- red hat, inc. spice, canonical ubuntu linux, debian linux +6 more +8 moreSpice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by...7.5 High
- x.org libx11, canonical ubuntu linux, debian linux +4 more +6 moreAn issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is...9.8 Critical
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one...8.8 High
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one...6.5 Medium
- botan project botanAn issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An off-by-one error when...7.5 High
- kamailio, debian linux +1 moreA Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x...9.8 Critical
- libraw, canonical ubuntu linux, debian linux +3 more +5 moreAn off-by-one error within the "LibRaw::kodak_ycbcr_load_raw()" function (internal/dcraw_common...6.5 Medium
- wiresharkIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-s7comm.c had an infinite...7.5 High
- axtls project axtlsaxTLS version 1.5.3 has a coding error in the ASN.1 parser resulting in the year (19)50 of...5.3 Medium
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by...7.8 High
- libarchiveread_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one...7.5 High
- debian linux, linux kernel, redhat enterprise linux +5 more +7 moreA flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr...5.5 Medium
- php, debian linux, netapp clustered data ontap +2 moreOff-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and...9.8 Critical
- qemuQEMU (aka Quick Emulator) built with the Rocker switch emulation support is vulnerable to an off...6.5 Medium
- qemu, canonical ubuntu linux +1 moreOff-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in...4.6 Medium
- google chrome, opensuse +1 moreOff-by-one error in the PDF functionality in Google Chrome before 25.0.1364.97 on Windows and...4.3 Medium
- google chromeOff-by-one error in Google V8, as used in Google Chrome before 14.0.835.163, allows remote...6.8 Medium
- linux kernelMultiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local...4.9 Medium
- lars hjemli cgit, fedoraproject fedora +1 moreOff-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3...5.0 Medium
- apache openoffice, canonical ubuntu linux, debian linux +2 moreMultiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in...9.3 High
- google chrome, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreOff-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in...8.8 High
- linux kernel, canonical ubuntu linux, opensuse +3 more +5 moreThe cfg80211_wext_giwessid function in net/wireless/wext-compat.c in the Linux kernel before 2.6...2.1 Low
- microsoft gdi\+Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP...4.3 Medium
- libpngMultiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow...4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreOff-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6...4.9 Medium
- Show moreLoading…