Search CVE reports
41 – 50 of 53433 results
Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containing U+0000 to const char* values without consistently rejecting the embedded NUL, causing bcrypt...
1 affected package
botan
| Package | 20.04 LTS |
|---|---|
| botan | Needs evaluation |
Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online OCSP client allowed a single HTTP redirect while posting an OCSP request to the URI in a certificate's Authority Information Access extension. A malicious OCSP...
1 affected package
botan
| Package | 20.04 LTS |
|---|---|
| botan | Needs evaluation |
Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded_RNG::clear() and then calls randomize with an empty output buffer while the generator is unseeded can cause AutoSeeded_RNG to mark...
1 affected package
botan
| Package | 20.04 LTS |
|---|---|
| botan | Needs evaluation |
minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to 11.0.1, src/index.ts implements firstPhasePreProcess() so that, at optimizationLevel 2 or higher, it repeatedly...
1 affected package
node-minimatch
| Package | 20.04 LTS |
|---|---|
| node-minimatch | Needs evaluation |
KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2.8.0, KeePassXC browser integration encrypts authorized responses in src/browser/BrowserMessageBuilder.cpp...
1 affected package
keepassxc
| Package | 20.04 LTS |
|---|---|
| keepassxc | Needs evaluation |
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the client_credentials and Resource Owner Password Credentials token grant handlers can authenticate request.client as...
1 affected package
python-oauthlib
| Package | 20.04 LTS |
|---|---|
| python-oauthlib | Needs evaluation |
A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries while searching for a null terminator. An attacker could...
1 affected package
eog
| Package | 20.04 LTS |
|---|---|
| eog | Needs evaluation |
A flaw was found in gcc. An attacker could cause a Denial of Service (DoS) by passing a string that is not null-terminated to the std::from_chars() function in the libstdc++ library. This issue triggers an out-of-bounds read...
58 affected packages
gcc-3.3, gcc-4.6, gcc-4.7, gcc-4.8, gcc-4.9...
| Package | 20.04 LTS |
|---|---|
| gcc-3.3 | Needs evaluation |
| gcc-4.6 | — |
| gcc-4.7 | — |
| gcc-4.8 | — |
| gcc-4.9 | — |
| gcc-5 | — |
| gcc-6 | — |
| gcc-7 | Needs evaluation |
| gcc-8 | Needs evaluation |
| gcc-9 | Needs evaluation |
| gcc-10 | Needs evaluation |
| gcc-11 | — |
| gcc-12 | — |
| gcc-13 | — |
| gcc-4.9-cross | — |
| gcc-5-cross | — |
| gcc-5-cross-ports | — |
| gcc-6-cross | — |
| gcc-6-cross-ports | — |
| gcc-7-cross | — |
| gcc-7-cross-ports | — |
| gcc-8-cross | Needs evaluation |
| gcc-8-cross-ports | Needs evaluation |
| gcc-9-cross | Needs evaluation |
| gcc-9-cross-mipsen | Needs evaluation |
| gcc-9-cross-ports | Needs evaluation |
| gcc-10-cross | Needs evaluation |
| gcc-10-cross-mipsen | Needs evaluation |
| gcc-10-cross-ports | Needs evaluation |
| gcc-11-cross | — |
| gcc-11-cross-mipsen | — |
| gcc-11-cross-ports | — |
| gcc-12-cross | — |
| gcc-12-cross-mipsen | — |
| gcc-12-cross-ports | — |
| gcc-13-cross | — |
| gcc-13-cross-ports | — |
| gcc-or1k-elf | — |
| gcc-riscv64-unknown-elf | Needs evaluation |
| gcc-xtensa-lx106 | Needs evaluation |
| gcc-snapshot | Needs evaluation |
| gcc-i686-linux-android | — |
| gcc-4.7-armel-cross | — |
| gcc-4.7-armhf-cross | — |
| gcc-4.8-arm64-cross | — |
| gcc-4.8-armhf-cross | — |
| gcc-4.8-powerpc-cross | — |
| gcc-4.8-ppc64el-cross | — |
| gcc-arm-linux-androideabi | — |
| gcc-arm-none-eabi | Needs evaluation |
| gcc-avr | Needs evaluation |
| gcc-defaults | Needs evaluation |
| gcc-h8300-hms | Needs evaluation |
| gcc-m68hc1x | Needs evaluation |
| gcc-mingw-w64 | Needs evaluation |
| gcc-msp430 | Needs evaluation |
| gccgo-4.9 | — |
| gccgo-6 | — |
A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of...
58 affected packages
gcc-3.3, gcc-4.6, gcc-4.7, gcc-4.8, gcc-4.9...
| Package | 20.04 LTS |
|---|---|
| gcc-3.3 | Needs evaluation |
| gcc-4.6 | — |
| gcc-4.7 | — |
| gcc-4.8 | — |
| gcc-4.9 | — |
| gcc-5 | — |
| gcc-6 | — |
| gcc-7 | Needs evaluation |
| gcc-8 | Needs evaluation |
| gcc-9 | Needs evaluation |
| gcc-10 | Needs evaluation |
| gcc-11 | — |
| gcc-12 | — |
| gcc-13 | — |
| gcc-4.9-cross | — |
| gcc-5-cross | — |
| gcc-5-cross-ports | — |
| gcc-6-cross | — |
| gcc-6-cross-ports | — |
| gcc-7-cross | — |
| gcc-7-cross-ports | — |
| gcc-8-cross | Needs evaluation |
| gcc-8-cross-ports | Needs evaluation |
| gcc-9-cross | Needs evaluation |
| gcc-9-cross-mipsen | Needs evaluation |
| gcc-9-cross-ports | Needs evaluation |
| gcc-10-cross | Needs evaluation |
| gcc-10-cross-mipsen | Needs evaluation |
| gcc-10-cross-ports | Needs evaluation |
| gcc-11-cross | — |
| gcc-11-cross-mipsen | — |
| gcc-11-cross-ports | — |
| gcc-12-cross | — |
| gcc-12-cross-mipsen | — |
| gcc-12-cross-ports | — |
| gcc-13-cross | — |
| gcc-13-cross-ports | — |
| gcc-or1k-elf | — |
| gcc-riscv64-unknown-elf | Needs evaluation |
| gcc-xtensa-lx106 | Needs evaluation |
| gcc-snapshot | Needs evaluation |
| gcc-i686-linux-android | — |
| gcc-4.7-armel-cross | — |
| gcc-4.7-armhf-cross | — |
| gcc-4.8-arm64-cross | — |
| gcc-4.8-armhf-cross | — |
| gcc-4.8-powerpc-cross | — |
| gcc-4.8-ppc64el-cross | — |
| gcc-arm-linux-androideabi | — |
| gcc-arm-none-eabi | Needs evaluation |
| gcc-avr | Needs evaluation |
| gcc-defaults | Needs evaluation |
| gcc-h8300-hms | Needs evaluation |
| gcc-m68hc1x | Needs evaluation |
| gcc-mingw-w64 | Needs evaluation |
| gcc-msp430 | Needs evaluation |
| gccgo-4.9 | — |
| gccgo-6 | — |
A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory...
58 affected packages
gcc-3.3, gcc-4.6, gcc-4.7, gcc-4.8, gcc-4.9...
| Package | 20.04 LTS |
|---|---|
| gcc-3.3 | Needs evaluation |
| gcc-4.6 | — |
| gcc-4.7 | — |
| gcc-4.8 | — |
| gcc-4.9 | — |
| gcc-5 | — |
| gcc-6 | — |
| gcc-7 | Needs evaluation |
| gcc-8 | Needs evaluation |
| gcc-9 | Needs evaluation |
| gcc-10 | Needs evaluation |
| gcc-11 | — |
| gcc-12 | — |
| gcc-13 | — |
| gcc-4.9-cross | — |
| gcc-5-cross | — |
| gcc-5-cross-ports | — |
| gcc-6-cross | — |
| gcc-6-cross-ports | — |
| gcc-7-cross | — |
| gcc-7-cross-ports | — |
| gcc-8-cross | Needs evaluation |
| gcc-8-cross-ports | Needs evaluation |
| gcc-9-cross | Needs evaluation |
| gcc-9-cross-mipsen | Needs evaluation |
| gcc-9-cross-ports | Needs evaluation |
| gcc-10-cross | Needs evaluation |
| gcc-10-cross-mipsen | Needs evaluation |
| gcc-10-cross-ports | Needs evaluation |
| gcc-11-cross | — |
| gcc-11-cross-mipsen | — |
| gcc-11-cross-ports | — |
| gcc-12-cross | — |
| gcc-12-cross-mipsen | — |
| gcc-12-cross-ports | — |
| gcc-13-cross | — |
| gcc-13-cross-ports | — |
| gcc-or1k-elf | — |
| gcc-riscv64-unknown-elf | Needs evaluation |
| gcc-xtensa-lx106 | Needs evaluation |
| gcc-snapshot | Needs evaluation |
| gcc-i686-linux-android | — |
| gcc-4.7-armel-cross | — |
| gcc-4.7-armhf-cross | — |
| gcc-4.8-arm64-cross | — |
| gcc-4.8-armhf-cross | — |
| gcc-4.8-powerpc-cross | — |
| gcc-4.8-ppc64el-cross | — |
| gcc-arm-linux-androideabi | — |
| gcc-arm-none-eabi | Needs evaluation |
| gcc-avr | Needs evaluation |
| gcc-defaults | Needs evaluation |
| gcc-h8300-hms | Needs evaluation |
| gcc-m68hc1x | Needs evaluation |
| gcc-mingw-w64 | Needs evaluation |
| gcc-msp430 | Needs evaluation |
| gccgo-4.9 | — |
| gccgo-6 | — |