119 matches found
OSV-2024-6 Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65533 Crash type: Global-buffer-overflow READ 16 Crash state: void jxl::NAVX2::WriteToOutputStage::StoreUnsignedRow jxl::NAVX2::WriteToOutputStage::OutputBuffers jxl::NAVX2::WriteToOutputStage::ProcessRow...
Security Bulletin: Vulnerabilities in OpenSSL affect GCM16 & GCM32 and LCM8 & LCM16 KVM Switch Firmware
Summary IBM GCM16 & GCM32 and LCM8 & LCM16 KVM Switch Firmware have addressed the following vulnerabilities in OpenSSL. Vulnerability Details CVEID: CVE-2017-3738 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an overflow bug in the AVX2 Montgomery...
SUSE-SU-2023:1718-2 Security update for glibc
This update for glibc fixes the following issues: Security issue fixed: - CVE-2023-0687: Fix allocated buffer overflow in gmon bsc1207975 Other issues fixed: - Fix avx2 strncmp offset compare condition check bsc1208358 - elf: Allow dlopen of filter object to work bsc1207571 - powerpc: Fix...
SUSE-SU-2023:1718-1 Security update for glibc
This update for glibc fixes the following issues: Security issue fixed: - CVE-2023-0687: Fix allocated buffer overflow in gmon bsc1207975 Other issues fixed: - Fix avx2 strncmp offset compare condition check bsc1208358 - elf: Allow dlopen of filter object to work bsc1207571 - powerpc: Fix...
K34681653: OpenSSL vulnerability CVE-2017-3738
Security Advisory Description There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and a...
SUSE CVE-2017-3738
There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attack...
OSV-2022-493 Segv on unknown address in jxl::N_AVX2::XYBStage<jxl::N_AVX2::PerChannelOp<jxl::N_AVX2::Op709> >::ProcessRo
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48132 Crash type: Segv on unknown address Crash state: jxl::NAVX2::XYBStage ::ProcessRo jxl::LowMemoryRenderPipeline::RenderRect jxl::LowMemoryRenderPipeline::ProcessBuffers...
Miscomputed sha2 results when using AVX2 backend
The v0.9.7 release of the sha2 crate introduced a new AVX2-accelerated backend which was automatically enabled for all x86/x8664 CPUs where AVX2 support was autodetected at runtime. This backend was buggy and would miscompute results for long messages i.e. messages spanning multiple SHA blocks. T...
GHSA-XPWW-G9JX-HP8R Miscomputed sha2 results when using AVX2 backend
The v0.9.7 release of the sha2 crate introduced a new AVX2-accelerated backend which was automatically enabled for all x86/x8664 CPUs where AVX2 support was autodetected at runtime. This backend was buggy and would miscompute results for long messages i.e. messages spanning multiple SHA blocks. T...
CVE-2022-29017
Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x8664/multiarch/strlen-avx2.S...
CVE-2022-29017
Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x8664/multiarch/strlen-avx2.S...
Design/Logic Flaw
Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x8664/multiarch/strlen-avx2.S...
CVE-2022-29017
Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x8664/multiarch/strlen-avx2.S...
UBUNTU-CVE-2022-29017
Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x8664/multiarch/strlen-avx2.S...
Bento4 安全漏洞
Bento4 is an open source C library for reading and writing MP4 files. Bento4 v1.6.0.0 contains a denial of service vulnerability that stems from a segmentation error in the /x8664/multiarch/strlen-avx2.S component, which could be exploited by an attacker to cause a denial of service...
OSV-2022-371 Segv on unknown address in jxl::N_AVX2::WriteToU8Stage::ProcessRow
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46963 Crash type: Segv on unknown address Crash state: jxl::NAVX2::WriteToU8Stage::ProcessRow jxl::LowMemoryRenderPipeline::RenderRect jxl::LowMemoryRenderPipeline::ProcessBuffers...
OSV-2022-305 Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessPaddingRow
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46304 Crash type: Heap-buffer-overflow READ Crash state: jxl::NAVX2::BlendingStage::ProcessPaddingRow jxl::LowMemoryRenderPipeline::RenderPadding jxl::LowMemoryRenderPipeline::ProcessBuffers...
Mageia: Security Advisory (MGASA-2017-0453)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Incorrect hash in sha2
The v0.9.7 release of the sha2 crate introduced a new AVX2-accelerated backend which was automatically enabled for all x86/x8664 CPUs where AVX2 support was autodetected at runtime. This backend was buggy and would miscompute results for long messages i.e. messages spanning multiple SHA blocks. T...