OL CVE Issue Summary:
Invoking `XML_Parse` before `rand()` results in non-random, predictable output
Little entropy used for hash initialization
Integer overflow in `doProlog()`
`XML_ParseBuffer()` in `xmlparse.c` does not reject a negative length.
OL CVE Issue Summary:
Invoking `XML_Parse` before `rand()` results in non-random, predictable output
Little entropy used for hash initialization
Integer overflow in `doProlog()`
`XML_ParseBuffer()` in `xmlparse.c` does not reject a negative length.
OL CVE Issue Summary:
An issue was discovered in `WEBrick`, a simple HTTP server bundled with `Ruby`, where it had not checked the `Transfer-Encoding` header value rigorously. An attacker may potentially exploit this issue to bypass a `reverse proxy` (which also has a poor header check), which may cause an `HTTP Request Smuggling attack`.
OL CVE Issue Summary:
Buffer overflow with long help argument
OL CVE Issue Summary :
OL CVE Issue Summary :
OL CVE Issue Summary :
OL CVE Issue Summary:
A flaw was discovered in OpenLDAP before 2.4.57 leading to integer underflow in slapd in the serialNumberAndIssuerCheck and serialNumberAndIssuerSerialCheck functions in schema_init.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to assertion failures in slapd in the authzPrettyNormal function in saslauthz.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to a crash in slapd in the slap_free_ctrls function in controls.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to invalid pointer access in slapd in the authzPrettyNormal function in saslauthz.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free in slapd in the dnPretty function in dn.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to a crash in slapd in the slap_parse_user function in saslauthz.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to an integer underflow in slapd in the certificateListExactNormalize function in schema_init.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to a crash in slapd in the issuerAndThisUpdateCheck function in schema_init.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to a segmentation fault in slapd in the slap_bv2undef_ad function in ad.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element,resulting in denial of service.
OL CVE Issue Summary:
A flaw was discovered in OpenLDAP before 2.4.57 leading to integer underflow in slapd in the serialNumberAndIssuerCheck and serialNumberAndIssuerSerialCheck functions in schema_init.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to assertion failures in slapd in the authzPrettyNormal function in saslauthz.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to a crash in slapd in the slap_free_ctrls function in controls.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to invalid pointer access in slapd in the authzPrettyNormal function in saslauthz.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free in slapd in the dnPretty function in dn.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to a crash in slapd in the slap_parse_user function in saslauthz.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to an integer underflow in slapd in the certificateListExactNormalize function in schema_init.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to a crash in slapd in the issuerAndThisUpdateCheck function in schema_init.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to a segmentation fault in slapd in the slap_bv2undef_ad function in ad.c, resulting in denial of service.
A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.
OL CVE Issue Summary:
xmlSnprintfElementContent() in valid.c is supposed to recursively dump the element content definition into a char buffer buf of size size. The variable len is assigned strlen(buf). If the content->type is XML_ELEMENT_CONTENT_ELEMENT, then
(i) the content->prefix is appended to buf (if it actually fits)
whereupon:
(ii)content->name is written to the buffer
However, the check is whether the content->name actually fits also uses len rather than the updated buffer length strlen(buf). This allows writing about "size" many bytes beyond the allocated memory.
