Lucene search
+L

1098 matches found

Oracle linux
Oracle linux
added 2022/08/08 12:00 a.m.81 views

kernel security and bug fix update

4.18.0-372.19.1.0.16.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32...

8.2CVSS7.9AI score0.0386EPSS
SaveExploits6
Oracle linux
Oracle linux
added 2022/08/02 12:00 a.m.54 views

firefox security update

91.12.0-2.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build 91.12.0-1 - Update to 91.12.0 build1...

8.8CVSS1.5AI score0.00748EPSS
SaveExploits0
Oracle linux
Oracle linux
added 2022/08/01 12:00 a.m.33 views

thunderbird security update

91.12.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 91.12.0-1 - Update to 91.12.0 build1...

8.8CVSS1.8AI score0.00748EPSS
SaveExploits0
NVD
NVD
added 2022/07/22 4:15 a.m.36 views

CVE-2022-31169

Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors can result in incorrect division results at runtime. This affects Wasmtime prior to version 0.38.2 and Cranelift prior to 0.85.2. This issue only...

7.5CVSS0.00809EPSS
SaveExploits0References2
Prion
Prion
added 2022/07/22 4:15 a.m.16 views

Design/Logic Flaw

Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors can result in incorrect division results at runtime. This affects Wasmtime prior to version 0.38.2 and Cranelift prior to 0.85.2. This issue only...

5CVSS7.7AI score0.00809EPSS
SaveExploits0References2Affected Software2
UbuntuCve
UbuntuCve
added 2022/07/22 4:15 a.m.40 views

CVE-2022-31169

Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors can result in incorrect division results at runtime. This affects Wasmtime prior to version 0.38.2 and Cranelift prior to 0.85.2. This issue only...

7.5CVSS7.2AI score0.00809EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/07/21 10:34 p.m.57 views

Cranelift vulnerable to miscompilation of constant values in division on AArch64

Impact There was a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors could result in incorrect division results at runtime. The translation rules for constants did not take into account whether sign- or zero-extension should happen, which resulted in an...

7.5CVSS7.4AI score0.00809EPSS
SaveExploits0References5Affected Software2
OSV
OSV
added 2022/07/21 10:34 p.m.78 views

GHSA-7F6X-JWH5-M9R4 Cranelift vulnerable to miscompilation of constant values in division on AArch64

Impact There was a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors could result in incorrect division results at runtime. The translation rules for constants did not take into account whether sign- or zero-extension should happen, which resulted in an...

5.9CVSS6.7AI score0.00809EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2022/07/21 1:50 p.m.8 views

CVE-2022-31169 Cranelift vulnerable to miscompilation of constant values in division on AArch64

Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors can result in incorrect division results at runtime. This affects Wasmtime prior to version 0.38.2 and Cranelift prior to 0.85.2. This issue only...

5.9CVSS6.5AI score0.00809EPSS
SaveExploits0References2
CVE
CVE
added 2022/07/21 1:50 p.m.99 views

CVE-2022-31169

CVE-2022-31169 affects Wasmtime’s Cranelift codegen on AArch64. A miscompilation in constant division may place incorrect values in registers due to sign/zero-extension rules, impacting WebAssembly sandbox correctness. Affected: Wasmtime prior to 0.38.2 and Cranelift prior to 0.85.2; fixed in Was...

7.5CVSS6.8AI score0.00809EPSS
SaveExploits0References2Affected Software2
Debian CVE
Debian CVE
added 2022/07/21 1:50 p.m.70 views

CVE-2022-31169

Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors can result in incorrect division results at runtime. This affects Wasmtime prior to version 0.38.2 and Cranelift prior to 0.85.2. This issue only...

7.5CVSS7.7AI score0.00809EPSS
SaveExploits0
OSV
OSV
added 2022/07/21 1:50 p.m.35 views

CVE-2022-31169 Cranelift vulnerable to miscompilation of constant values in division on AArch64

Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors can result in incorrect division results at runtime. This affects Wasmtime prior to version 0.38.2 and Cranelift prior to 0.85.2. This issue only...

5.9CVSS7.6AI score0.00772EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/07/21 1:50 p.m.67 views

CVE-2022-31169 Cranelift vulnerable to miscompilation of constant values in division on AArch64

Wasmtime is a standalone runtime for WebAssembly. There is a bug in Wasmtime's code generator, Cranelift, for AArch64 targets where constant divisors can result in incorrect division results at runtime. This affects Wasmtime prior to version 0.38.2 and Cranelift prior to 0.85.2. This issue only...

5.9CVSS7.9AI score0.00809EPSS
SaveExploits0References2
Amazon
Amazon
added 2022/07/20 12:00 a.m.71 views

Important: kernel

Issue Overview: There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any privileges. CVE-2022-2318 Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text...

7.8CVSS7AI score0.00427EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/07/15 12:00 a.m.32 views

EulerOS Virtualization 2.10.0 : gzip (EulerOS-SA-2022-2089)

According to the versions of the gzip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - gzip: arbitrary-file-write vulnerability CVE-2022-1271 Note that Tenable Network Security has extracted the preceding description...

8.8CVSS6.8AI score0.05036EPSS
SaveExploits0References2
Oracle linux
Oracle linux
added 2022/07/15 12:00 a.m.72 views

kernel security, bug fix, and enhancement update

4.18.0-372.16.1.0.16.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32...

7CVSS0.5AI score0.00619EPSS
SaveExploits0
RustSec
RustSec
added 2022/07/05 12:00 p.m.7 views

Miscompilation of constant values in division on AArch64

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7f6x-jwh5-m9r4. For more information see the GitHub-hosted security advisory...

7AI score
SaveExploits0Affected Software1
OSV
OSV
added 2022/07/05 12:00 p.m.10 views

RUSTSEC-2022-0101 Miscompilation of constant values in division on AArch64

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7f6x-jwh5-m9r4. For more information see the GitHub-hosted security advisory...

8.1CVSS8AI score0.00809EPSS
SaveExploits1References3
Oracle linux
Oracle linux
added 2022/07/01 12:00 a.m.50 views

thunderbird security update

91.11.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 91.11.0-2 - Update to 91.11.0 build2 91.11.0-1 - Update to 91.11.0 build1...

1.7AI score0.23941EPSS
SaveExploits1
Oracle linux
Oracle linux
added 2022/07/01 12:00 a.m.68 views

firefox security update

91.11.0-2.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build 91.11.0-2 - Update to 91.11.0 build2 91.11.0-1 - Update to 91.11.0 build1...

1.5AI score0.23941EPSS
SaveExploits1
Rows per page
Query Builder