Open Source Vulnerabilities

ffmpeg

FFmpeg through 4

postgresql15

Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account runnin...

ffmpeg

cbs_jpeg_split_fragment in libavcodec/cbs_jpeg

postgresql15

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access

ffmpeg

FFmpeg 2

ffmpeg

FFmpeg through 4

ffmpeg

decode_frame in libavcodec/exr

ffmpeg

track_header in libavformat/vividas

ffmpeg

FFmpeg <=4

ffmpeg

Buffer Overflow vulnerability in FFMpeg 4

ffmpeg

Denial of Service vulnerability exists in FFmpeg 4

ffmpeg

Denial of Service vulnerability exists in FFmpeg 4

ffmpeg

Buffer Overflow vulnerability exists in FFmpeg 4

ffmpeg

FFmpeg 4

ffmpeg

dwa_uncompress in libavcodec/exr

ffmpeg

FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) suffers from a an assertion failure at src/libavutil/mathematics

ffmpeg

adts_decode_extradata in libavformat/adtsenc

ffmpeg

libavcodec/dnxhddec

ffmpeg

Denial of Service vulnerability exists in FFmpeg 4

ffmpeg

Buffer Overflow vulnerability in FFmpeg 4

ffmpeg

Buffer Overflow vulnerability in FFmpeg 4

ffmpeg

Buffer Overflow vulnerability in FFmpeg 4

ffmpeg

FFmpeg 4

boring-registry-fips, kyverno-fips

Security fix for GHSA-mh63-6h87-95cp applied in: boring-registry-fips 0.15.5-r1, kyverno-fips 1.13.6-r1

ffmpeg

FFmpeg 4

busybox

archival/libarchive/decompress_unlzma

busybox

get_next_block function in archival/libarchive/decompress_bunzip2

busybox

In the add_match function in libbb/lineedit

busybox

Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution

busybox

issue was discovered in BusyBox before 1

litestream, litestream, metrics-server-fips, litestream, litestream, kubernetes-dns-node-cache-fips, argo-events, minio-client-fips, minio-client-fips

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read

busybox

issue was discovered in BusyBox through 1

busybox

decompress_gunzip

litestream, litestream, metrics-server-fips, litestream, litestream, kubernetes-dns-node-cache-fips, argo-events, minio-client-fips, minio-client-fips

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

busybox

use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function

busybox

use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function

litestream, litestream, litestream, litestream, metrics-server-fips, kubernetes-dns-node-cache-fips, minio-client-fips, minio-client-fips

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

busybox

use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function

busybox

use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function

busybox

use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function

busybox

use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function

busybox

use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function

busybox

use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function

busybox

use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function

busybox

incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved chara...

busybox

out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed

busybox

BusyBox through 1

argo-events, multus-cni-fips, calico-fips, opensearch-k8s-operator-fips, step-issuer-fips

Within HostnameError

step-issuer-fips

Security fix for GHSA-h8cp-697h-8c8p applied in: step-issuer-fips 0.9.9-r1

opentelemetry-collector-contrib-fips, kube-logging-operator, local-static-provisioner-fips, harbor, argo-workflows

Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic