263 matches found
CVE-2021-33462
An issue was discovered in yasm version 1.3.0. There is a use-after-free in exprtraversenodespost in libyasm/expr.c...
CVE-2021-33454
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasmexprgetintnum in libyasm/expr.c...
DEBIAN-CVE-2021-33462
An issue was discovered in yasm version 1.3.0. There is a use-after-free in exprtraversenodespost in libyasm/expr.c...
AZL-10324 CVE-2021-33454 affecting package yasm for versions less than 1.3.0-15
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasmexprgetintnum in libyasm/expr.c...
AZL-10333 CVE-2021-33463 affecting package yasm 1.3.0-17
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasmexprcopyexcept in libyasm/expr.c...
UBUNTU-CVE-2021-33462
An issue was discovered in yasm version 1.3.0. There is a use-after-free in exprtraversenodespost in libyasm/expr.c...
CVE-2021-33454
CVE-2021-33454 – Summary . A NULL pointer dereference exists in yasm 1.3.0 (libyasm/expr.c: yasm_expr_get_intnum). This affects yasm 1.3.0 and is described across multiple security advisories. Impact: according to the CVSS data, local access with low attack complexity, no privileges required, but...
yasm 代码问题漏洞
yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm version 1.3.0, which stems from a null pointer reference to yasmexprgetintnum in its libyasm/expr.c component...
PT-2022-10237
Name of the Vulnerable Software and Affected Versions mjs affected versions not specified Description An issue was discovered in mjs, a Restricted JavaScript engine, affecting ES6, which is JavaScript version 6. The issue involves a NULL pointer dereference in the exec expr function located in...
PT-2022-10258
Name of the Vulnerable Software and Affected Versions yasm version 1.3.0 Description A use-after-free issue was discovered in the expr traverse nodes post function located in the libyasm/expr.c file. This issue affects the functionality of the software, potentially leading to instability or...
yasm 资源管理错误漏洞
yasm is yasm open source a completely rewritten Netwide assembler. A denial of service vulnerability exists in yasm version 1.3.0, which stems from a post-release reuse of the exprtraversenodespost function in libyasm/expr.c. An attacker could use this vulnerability to cause a denial of service. ...
PT-2022-10259
Name of the Vulnerable Software and Affected Versions yasm version 1.3.0 Description A problem has been detected in yasm, where a NULL pointer dereference occurs in the yasm expr copy except function located in the libyasm/expr.c file. This issue affects the functionality of yasm. Recommendations...
yasm 代码问题漏洞
yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm version 1.3.0, which stems from a NULL pointer dereference in the yasmexprcopyexcept function in libyasm/expr.c. The vulnerability is caused by the presence of a NULL pointer...
MariaDB Item_subselect::init_expr_cache_tracker Buffer Overflow
The vulnerability of the Itemsubselect::initexprcachetracker function in the MariaDB database management system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...
DEBIAN-CVE-2022-32083
MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Itemsubselect::initexprcachetracker...
net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
...
DEBIAN-CVE-2022-27384
An issue in the component Itemsubselect::initexprcachetracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...
UBUNTU-CVE-2022-27384
An issue in the component Itemsubselect::initexprcachetracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...
PT-2022-12777
Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A SEGV issue was found in Cesanta MJS via the exec expr function at src/mjs exec.c, which can cause a Denial of Service DoS. Recommendations For version 2.20.0, consider disabling the exec expr function a...
nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace.
...