#cwe-130

共收录 53 条相关情报。

漏洞预警2026-09-22 发布INFO

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to si...

CVE-2026-77619

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit c

历史摘要 · 未重新核验 · NVD

#cve #cwe-130 #cwe-789

安全公告2026-09-22 发布INFO

Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.

CVE-2026-77619

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit c

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-130 #cwe-789

漏洞预警2026-09-18 发布INFO

Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC800, and ABB Freela...

CVE-2023-5778

Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Control

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

漏洞预警2026-09-16 发布INFO

On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, a specially crafted packet can cause the OSPFv3 agent to restart unexpectedly.

CVE-2026-73455

On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, a specially crafte

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

漏洞预警2026-09-10 发布INFO

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uniniti...

CVE-2026-15418

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

漏洞预警2026-08-28 发布INFO

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages...

CVE-2026-5706

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to s

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

漏洞预警2026-08-27 发布INFO

An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c reports the IP total length as the payload length i...

CVE-2026-71402

An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capt

历史摘要 · 未重新核验 · NVD

#cve #cwe-125 #cwe-130

安全公告2026-08-27 发布INFO

wicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total length

CVE-2026-71402

An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capt

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-125 #cwe-130

漏洞预警2026-08-27 发布INFO

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds ...

CVE-2026-81575

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which con

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

漏洞预警2026-08-26 发布INFO

mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface. A local user with access to th...

CVE-2026-58097

mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the

历史摘要 · 未重新核验 · NVD

#cve #cwe-122 #cwe-130

漏洞预警2026-08-26 发布INFO

LcpDecodeConfig() did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717. Undersized options would trigger an out-of-bo...

CVE-2026-58096

LcpDecodeConfig() did not validate the length of received endpoint discriminator options against the minimum required by

历史摘要 · 未重新核验 · NVD

#cve #cwe-130 #cwe-787

安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket...

CVE-2026-67292

FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket transport (libfreerdp/cor

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-130 #severity:critical

漏洞预警2026-08-01 发布INFO

FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket transport (libfreerdp/core/gateway/websocket.c). The client's Pong reply reuses a ...

CVE-2026-67292

FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket transport (libfreerdp/cor

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

安全公告2026-08-01 发布INFO

FreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosure

CVE-2026-67292

FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket transport (libfreerdp/cor

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-130

漏洞预警2026-07-28 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in lib...

CVE-2026-62424

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

漏洞预警2026-07-28 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and Rock Ridge / SUSP walk in lib...

CVE-2026-62423

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

漏洞预警2026-07-20 发布INFO

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.

CVE-2026-26081

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

漏洞预警2026-07-17 发布MEDIUM

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a length header that a...

CVE-2026-54466

WebSocket-driver 是一个支持可插拔 I/O 的 WebSocket 协议处理库。在版本 0.7.5 之前，该库在实现 WebSocket 协议草案版本（draft 版本）的帧格式时存在一个整数精度丢失漏洞。具体来说，draf

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

漏洞预警2026-07-17 发布INFO

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.16, _read_character_string and _read_string in src/zeroconf/_protocol/incoming.py adv...

CVE-2026-48487

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.16, _read_character_string a

历史摘要 · 未重新核验 · NVD

#cve #cwe-130

安全公告2026-07-17 发布INFO

Zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet

CVE-2026-48487

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.16, _read_character_string a

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-130