Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

17 records

TI-2021-13380 CVE-2021-34338 · GHSA-h258-qmx2-3648

Out-of-bounds read in ming

Priority LOW 31

Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01105 Published 2022-03-07 No fix listed CWE-125
TI-2021-13381 CVE-2021-34339 · GHSA-5p52-chjc-g56x

Out-of-bounds read in ming

Priority LOW 31

Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00953 Published 2022-03-07 No fix listed CWE-125
TI-2021-13382 CVE-2021-34340 · GHSA-79h4-6hc9-65cp

Out-of-bounds read in ming

Priority LOW 31

Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00893 Published 2022-03-07 No fix listed CWE-125
TI-2021-13383 CVE-2021-34341 · GHSA-vwhj-c7xv-j96g

Out-of-bounds read in ming

Priority LOW 31

Ming 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF() in the decompile.c file that causes a direct segmentation fault and leads to denial of service.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00893 Published 2022-03-07 No fix listed CWE-125
TI-2021-13384 CVE-2021-34342 · GHSA-5frm-q7pg-2crp

Out-of-bounds read in ming

Priority LOW 31

Ming 0.4.8 has an out-of-bounds read vulnerability in the function newVar_N() in decompile.c which causes a huge information leak.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01144 Published 2022-03-07 No fix listed CWE-125
Priority LOW 27

An invalid memory read vulnerability was found in the function OpCode (called from isLogicalOp and decompileIF) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00958 Published 2017-07-29 No fix listed CWE-125
Priority LOW 27

A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1474) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01185 Published 2017-07-29 No fix listed CWE-125
Priority LOW 27

A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1440) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01078 Published 2017-07-29 No fix listed CWE-125
Priority LOW 27

A heap-based buffer over-read was found in the function OpCode (called from decompileSETMEMBER) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01078 Published 2017-07-29 No fix listed CWE-125