Search CVE reports
81 – 90 of 39653 results
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, PackInfo._read() in archiveinfo.py used an O(n^2) cumulative sum pattern for...
1 affected package
py7zr
| Package | 24.04 LTS |
|---|---|
| py7zr | Needs evaluation |
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, py7zr's Worker.decompress() extracted archive entries without tracking total decompressed...
1 affected package
py7zr
| Package | 24.04 LTS |
|---|---|
| py7zr | Needs evaluation |
Heap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch
3 affected packages
freerdp, freerdp2, freerdp3
| Package | 24.04 LTS |
|---|---|
| freerdp | Not in release |
| freerdp2 | Needs evaluation |
| freerdp3 | Needs evaluation |
Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag
3 affected packages
freerdp, freerdp2, freerdp3
| Package | 24.04 LTS |
|---|---|
| freerdp | Not in release |
| freerdp2 | Needs evaluation |
| freerdp3 | Needs evaluation |
Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch
3 affected packages
freerdp, freerdp2, freerdp3
| Package | 24.04 LTS |
|---|---|
| freerdp | Not in release |
| freerdp2 | Needs evaluation |
| freerdp3 | Needs evaluation |
Heap-buffer-overflow write in AVC444 YUV buffer allocation
3 affected packages
freerdp, freerdp2, freerdp3
| Package | 24.04 LTS |
|---|---|
| freerdp | Not in release |
| freerdp2 | Needs evaluation |
| freerdp3 | Needs evaluation |
[Unknown description]
1 affected package
fastdds
| Package | 24.04 LTS |
|---|---|
| fastdds | Needs evaluation |
AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.1, a malicious SSH server can write arbitrary files on the...
1 affected package
python-asyncssh
| Package | 24.04 LTS |
|---|---|
| python-asyncssh | Needs evaluation |
AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Version 2.23.0 contains an incomplete fix for CVE-2026-45309...
1 affected package
python-asyncssh
| Package | 24.04 LTS |
|---|---|
| python-asyncssh | Needs evaluation |
[Unknown description]
1 affected package
xrdp
| Package | 24.04 LTS |
|---|---|
| xrdp | Needs evaluation |