Search CVE reports
401 – 410 of 41062 results
RabbitMQ is a messaging and streaming broker. From 4.2.0 to before 4.2.4, RabbitMQ's MQTT plugin allows for topic-level authorization using regular expressions with variable substitution. Administrators can create patterns such as...
1 affected package
rabbitmq-server
| Package | 20.04 LTS |
|---|---|
| rabbitmq-server | Not affected |
libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength...
1 affected package
libusb
| Package | 20.04 LTS |
|---|---|
| libusb | Not affected |
Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows forged OCSP responses signed with an expired responder certificate to be accepted as valid. OCSP response verification in...
1 affected package
erlang
| Package | 20.04 LTS |
|---|---|
| erlang | Needs evaluation |
Improper Following of a Certificate's Chain of Trust vulnerability in Erlang OTP public_key (pubkey_cert module) allows a non-CA certificate to be accepted as an intermediate issuer, enabling certificate chain forgery. In...
1 affected package
erlang
| Package | 20.04 LTS |
|---|---|
| erlang | Needs evaluation |
libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than...
1 affected package
libusb
| Package | 20.04 LTS |
|---|---|
| libusb | Not affected |
HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file(). send_file() opens its string argument with Perl's 2-arg open(). The 2-arg form interprets magic prefixes: '| cmd' and 'cmd |' open a pipe to...
1 affected package
libhttp-daemon-perl
| Package | 20.04 LTS |
|---|---|
| libhttp-daemon-perl | Needs evaluation |
IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. _parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in...
2 affected packages
libio-compress-perl, perl
| Package | 20.04 LTS |
|---|---|
| libio-compress-perl | Needs evaluation |
| perl | Needs evaluation |
IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. When decode_ux() in bin/zipdetails handles an Info-ZIP...
2 affected packages
libio-compress-perl, perl
| Package | 20.04 LTS |
|---|---|
| libio-compress-perl | Needs evaluation |
| perl | Needs evaluation |
IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward. fastForward() compares length $offset (the digit count of the offset, 1 to 19) against the chunk size $c instead of...
2 affected packages
libio-compress-perl, perl
| Package | 20.04 LTS |
|---|---|
| libio-compress-perl | Needs evaluation |
| perl | Needs evaluation |
IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date. _dosToUnixTime() decodes the local-file-header last-modification date field and calls...
2 affected packages
libio-compress-perl, perl
| Package | 20.04 LTS |
|---|---|
| libio-compress-perl | Needs evaluation |
| perl | Needs evaluation |