782 matches found
PT-2024-31159 · Nanomq · Nanomq
Name of the Vulnerable Software and Affected Versions: Nanomq version 0.21.9 Description: The issue is related to an invalid read size, allowing attackers to cause a Denial of Service DoS. Recommendations: For Nanomq version 0.21.9, at the moment, there is no information about a newer version tha...
CVE-2024-44460
Nanomq is affected by CVE-2024-44460 due to an invalid read size in version v0.21.9, which can lead to a Denial of Service. Public sources consistently describe the issue as impacting Nanomq v0.21.9 and confirming a DoS condition, but do not provide a confirmed patch or fixed version in the suppl...
CVE-2024-44460
An invalid read size in Nanomq v0.21.9 allows attackers to cause a Denial of Service DoS...
OESA-2024-1962 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix deadlock during failing recovery Commit 0b9902c1fcc5 "s390/qeth: fix deadlock during recovery" removed taking disciplinemutex inside qethdoreset,...
mupdf:pdf_fuzzer: Crash in pdf_dict_get
Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=4839131497693184 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzerasanmupdf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x02008264b621 Crash State:...
kernel: pvrusb2: fix use after free on context disconnection
In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a kthread is created targeting the pvr2contextthreadfunc function, which may call pvr2contextdestroy and thus call kfree on the context object. However...
ffmpeg:ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer: Crash in av_channel_layout_uninit
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5733527483121664 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACLATMfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000044b...
RHEL 6 : openexr (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - OpenEXR: Heap-buffer-overflow in Imf25::copyIntoFrameBuffer CVE-2021-23169 - OpenEXR: Heap Overflow in...
Spoofing
In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a kthread is created targeting the pvr2contextthreadfunc function, which may call pvr2contextdestroy and thus call kfree on the context object. However...
UBUNTU-CVE-2023-52445
In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix use after free on context disconnection Upon module load, a kthread is created targeting the pvr2contextthreadfunc function, which may call pvr2contextdestroy and thus call kfree on the context object. However...
MGASA-2024-0045 Updated wireshark packages fix security vulnerabilities
The updated packages fix security vulnerabilities: RTPS dissector memory leak. CVE-2023-5371 SSH dissector invalid read of memory blocks. CVE-2023-6174 NetScreen File Parsing Heap-based Buffer Overflow. CVE-2023-6175 GVCP dissector crash via packet injection or crafted capture file. CVE-2024-0208...
Updated wireshark packages fix security vulnerabilities
The updated packages fix security vulnerabilities: RTPS dissector memory leak. CVE-2023-5371 SSH dissector invalid read of memory blocks. CVE-2023-6174 NetScreen File Parsing Heap-based Buffer Overflow. CVE-2023-6175 GVCP dissector crash via packet injection or crafted capture file. CVE-2024-0208...
glslang:compile_fuzzer: Crash in glslang::TSourceLoc::getStringNameOrNum
Project: https://github.com/khronosgroup/glslang.git Detailed Report: https://oss-fuzz.com/testcase?key=6306603043192832 Project: glslang Fuzzing Engine: libFuzzer Fuzz Target: compilefuzzer Job Type: libfuzzerasanglslang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000bfff8000...
CVE-2023-31102
Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive...
CVE-2023-31102
Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive...
DEBIAN-CVE-2023-31102
Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive...
Integer overflow
Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive...
UBUNTU-CVE-2023-31102
Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive...
