Open Source Vulnerabilities
bind
malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause ...
bind
malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause ...
bind
In ISC BIND9 versions BIND 9
bind
attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients
bind
attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients
py3-pillow, py3.10-pillow
libImaging/FliDecode
py3-pillow, py3.10-pillow
libImaging/PcxDecode
py3-pillow, py3.10-pillow
libImaging/SgiRleDecode
bind
BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features
bind
BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features
py3-pillow, py3.10-pillow
libImaging/TiffDecode
apr
out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1
apr
out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1
py3-pillow, py3.10-pillow
There is a DoS vulnerability in Pillow before 6
py3-pillow/ py3.10-pillow
There is a DoS vulnerability in Pillow before 6
apr
On Windows, Apache Portable Runtime 1
py3-pillow, py3.10-pillow
In Pillow before 8
apr
Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer
apr
Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer
py3-pillow, py3.10-pillow
In Pillow before 8
apr
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data
apr
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data
py3-pillow, py3.10-pillow
In Pillow before 8
py3-pillow, py3.10-pillow
Pillow before 8
py3-pillow, py3.10-pillow
Pillow before 8
py3-pillow, py3.10-pillow
Pillow before 8
bind
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak
bind
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak
py3-pillow, py3.10-pillow
issue was discovered in Pillow before 8
py3-pillow/ py3.10-pillow
issue was discovered in Pillow before 8
bind
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak
bind
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak
bind
By sending specific queries to the resolver, an attacker can cause named to crash
bind
By sending specific queries to the resolver, an attacker can cause named to crash
dpkg
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1
dpkg
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1
py3-pillow, py3.10-pillow
issue was discovered in Pillow before 8
py3-pillow/ py3.10-pillow
issue was discovered in Pillow before 8
bind
attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources
bind
attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources
py3-pillow, py3.10-pillow
issue was discovered in Pillow before 8
py3-pillow/ py3.10-pillow
issue was discovered in Pillow before 8
bind
underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process
bind
underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process
py3-pillow, py3.10-pillow
issue was discovered in Pillow before 8
py3-pillow/ py3.10-pillow
issue was discovered in Pillow before 8
bind
By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolutio...
bind
By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolutio...
py3-pillow, py3.10-pillow
issue was discovered in Pillow before 8
py3-pillow/ py3.10-pillow
issue was discovered in Pillow before 8
