Search CVE reports
791 – 800 of 46140 results
GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML...
1 affected package
bison
| Package | 22.04 LTS |
|---|---|
| bison | Needs evaluation |
An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend (bfd/elf32-dlx.c) in GNU binutils. The dlx_rtype_to_howto() function maps ELF relocation types to internal howto structures but fails to perform...
1 affected package
binutils
| Package | 22.04 LTS |
|---|---|
| binutils | Needs evaluation |
Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so an encode failure leaves the encoder out of sync with the peer decoder and corrupts subsequent header blocks...
1 affected package
trafficserver
| Package | 22.04 LTS |
|---|---|
| trafficserver | Needs evaluation |
Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0...
1 affected package
trafficserver
| Package | 22.04 LTS |
|---|---|
| trafficserver | Needs evaluation |
Several Apache Traffic Server experimental plugins have memory-safety and limit-bypass errors. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are...
1 affected package
trafficserver
| Package | 22.04 LTS |
|---|---|
| trafficserver | Needs evaluation |
The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, enabling denial of service. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from...
1 affected package
trafficserver
| Package | 22.04 LTS |
|---|---|
| trafficserver | Needs evaluation |
The Apache Traffic Server webp_transform plugin can decode unsafely and serve mislabeled, cacheable responses. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through...
1 affected package
trafficserver
| Package | 22.04 LTS |
|---|---|
| trafficserver | Needs evaluation |
The Apache Traffic Server intercept plugin has a use-after-free. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to...
1 affected package
trafficserver
| Package | 22.04 LTS |
|---|---|
| trafficserver | Needs evaluation |
The Apache Traffic Server header_rewrite plugin can crash or corrupt memory during cookie operations and CIDR condition matching. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from...
1 affected package
trafficserver
| Package | 22.04 LTS |
|---|---|
| trafficserver | Needs evaluation |
The Apache Traffic Server prefetch plugin can crash when processing attacker-influenced input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are...
1 affected package
trafficserver
| Package | 22.04 LTS |
|---|---|
| trafficserver | Needs evaluation |