Search CVE reports
691 – 700 of 41446 results
OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline() function of mdb_load. When processing malformed input containing an...
2 affected packages
openldap, lmdb
| Package | 18.04 LTS |
|---|---|
| openldap | Not affected |
| lmdb | Vulnerable |
zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib...
4 affected packages
zlib, rsync, zsync, klibc
| Package | 18.04 LTS |
|---|---|
| zlib | Not affected |
| rsync | Not affected |
| zsync | Needs evaluation |
| klibc | Not affected |
A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests...
1 affected package
undertow
| Package | 18.04 LTS |
|---|---|
| undertow | Needs evaluation |
When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent.
1 affected package
curl
| Package | 18.04 LTS |
|---|---|
| curl | Vulnerable |
When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified file if they were added as recognized in...
1 affected package
curl
| Package | 18.04 LTS |
|---|---|
| curl | Vulnerable |
When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option...
1 affected package
curl
| Package | 18.04 LTS |
|---|---|
| curl | Not affected |
When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the...
1 affected package
curl
| Package | 18.04 LTS |
|---|---|
| curl | Vulnerable |
When using `CURLOPT_PINNEDPUBLICKEY` option with libcurl or `--pinnedpubkey` with the curl tool,curl should check the public key of the server certificate to verify the peer. This check was skipped in a certain condition that...
1 affected package
curl
| Package | 18.04 LTS |
|---|---|
| curl | Not affected |
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, reading multiple invalid cookies can lead to a logging storm. If the cookies attribute is accessed in an application,...
1 affected package
python-aiohttp
| Package | 18.04 LTS |
|---|---|
| python-aiohttp | Ignored |
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. In versions 3.13.2 and below, handling of chunked messages can result in excessive blocking CPU usage when receiving a large number of chunks. If an...
1 affected package
python-aiohttp
| Package | 18.04 LTS |
|---|---|
| python-aiohttp | Vulnerable |