Search CVE reports

Toggle filters

11 – 20 of 36 results

CVE-2021-31598

Medium priority

Some fixes available 1 of 47

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow.

4 affected packages

mapcache, netcdf, netcdf-parallel, scilab

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mapcache Vulnerable Vulnerable Vulnerable Vulnerable Needs evaluation
netcdf Vulnerable Vulnerable Vulnerable Vulnerable Needs evaluation
netcdf-parallel Vulnerable Vulnerable Vulnerable Not in release Ignored
scilab Vulnerable Vulnerable Vulnerable Vulnerable Fixed
Show less packages

CVE-2021-31348

Medium priority
Vulnerable

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling while parsing crafted XML files (out-of-bounds read after a certain strcspn failure).

4 affected packages

mapcache, netcdf, netcdf-parallel, scilab

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mapcache Vulnerable Vulnerable Vulnerable Vulnerable Needs evaluation
netcdf Vulnerable Vulnerable Vulnerable Vulnerable Needs evaluation
netcdf-parallel Vulnerable Vulnerable Vulnerable Not in release Ignored
scilab Vulnerable Vulnerable Vulnerable Vulnerable Needs evaluation
Show less packages

CVE-2021-31347

Medium priority

Some fixes available 1 of 59

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling while parsing crafted XML files (writing outside a memory region created by mmap).

5 affected packages

mapcache, navit, netcdf, netcdf-parallel, scilab

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mapcache Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
navit Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
netcdf Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
netcdf-parallel Needs evaluation Needs evaluation Needs evaluation Not in release Ignored
scilab Needs evaluation Needs evaluation Needs evaluation Needs evaluation Fixed
Show less packages

CVE-2021-31229

Medium priority

Some fixes available 1 of 59

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd() performs incorrect memory handling while parsing crafted XML files, which leads to an out-of-bounds write of a one byte constant.

5 affected packages

mapcache, navit, netcdf, netcdf-parallel, scilab

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mapcache Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
navit Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
netcdf Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
netcdf-parallel Needs evaluation Needs evaluation Needs evaluation Not in release Ignored
scilab Needs evaluation Needs evaluation Needs evaluation Needs evaluation Fixed
Show less packages

CVE-2021-30485

Medium priority

Some fixes available 1 of 59

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd(), while parsing a crafted XML file, performs incorrect memory handling, leading to a NULL pointer dereference while running strcmp() on a NULL pointer.

5 affected packages

mapcache, navit, netcdf, netcdf-parallel, scilab

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mapcache Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
navit Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
netcdf Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
netcdf-parallel Needs evaluation Needs evaluation Needs evaluation Not in release Ignored
scilab Needs evaluation Needs evaluation Needs evaluation Needs evaluation Fixed
Show less packages

CVE-2021-26222

Medium priority
Needs evaluation

The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool.

5 affected packages

mapcache, navit, netcdf, netcdf-parallel, scilab

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mapcache Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
navit Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
netcdf Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
netcdf-parallel Needs evaluation Needs evaluation Needs evaluation Not in release Ignored
scilab Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2021-26221

Medium priority
Needs evaluation

The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool.

4 affected packages

mapcache, netcdf, netcdf-parallel, scilab

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mapcache Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
netcdf Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
netcdf-parallel Needs evaluation Needs evaluation Needs evaluation Not in release Ignored
scilab Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2021-26220

Medium priority
Needs evaluation

The ezxml_toxml function in ezxml 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool.

4 affected packages

mapcache, netcdf, netcdf-parallel, scilab

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
mapcache Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
netcdf Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
netcdf-parallel Needs evaluation Needs evaluation Needs evaluation Not in release Ignored
scilab Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2020-26160

Medium priority
Needs evaluation

jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fails, "" is the value of aud....

4 affected packages

golang-github-coreos-discovery-etcd-io, golang-github-dgrijalva-jwt-go, juju-core, telegraf

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
golang-github-coreos-discovery-etcd-io Needs evaluation Needs evaluation Needs evaluation Not in release Not in release
golang-github-dgrijalva-jwt-go Not in release Not affected Needs evaluation Needs evaluation Needs evaluation
juju-core Not in release Not in release Not in release Not in release Not affected
telegraf Not in release Needs evaluation Not in release Not in release Not in release
Show less packages

CVE-2020-15136

Medium priority
Needs evaluation

In ectd before versions 3.4.10 and 3.3.23, gateway TLS authentication is only applied to endpoints detected in DNS SRV records. When starting a gateway, TLS authentication will only be attempted on endpoints identified in DNS SRV...

1 affected package

etcd

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
etcd Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages
  1. Previous page
  2. 1
  3. 2
  4. 3
  5. 4
  6. Next page
Export to JSON