RSS   Vulnerabilities for 'Whoopsie'   RSS

2020-07-06
 
CVE-2020-15570

CWE-770
 

 
The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to cause a denial of service via a malformed crash file.

 
2020-04-24
 
CVE-2020-12135

CWE-190
 

 
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.

 
2020-02-08
 
CVE-2019-11484

CWE-190
 

 
Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.

 


Copyright 2024, cxsecurity.com

 

Back to Top