249 matches found
Mozilla Firefox Security Advisory (MFSA2020-54) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
Unexpected panics in num-bigint
Impact Two scenarios were reported where BigInt and BigUint multiplication may unexpectedly panic. - The internal mac3 function did not expect the possibility of non-empty all-zero inputs, leading to an unwrap panic. - A buffer was allocated with less capacity than needed for an intermediate...
GHSA-V935-PQMR-G8V9 Unexpected panics in num-bigint
Impact Two scenarios were reported where BigInt and BigUint multiplication may unexpectedly panic. - The internal mac3 function did not expect the possibility of non-empty all-zero inputs, leading to an unwrap panic. - A buffer was allocated with less capacity than needed for an intermediate...
PT-2021-24461
Name of the Vulnerable Software and Affected Versions: num-bigint versions 0.4.1 through 0.4.2 Description: The issue arises from two scenarios where BigInt and BigUint multiplication may unexpectedly panic. This occurs due to the internal mac3 function not expecting non-empty all-zero inputs,...
Unsoundness in bigint
An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...
anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +93 more potentially affected by CVE-2020-35880 via bigint (4.4.3)
bigint CARGO version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on bigint and may be impacted: - anchor-token =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1 - csepicwalletapi 1.0.0 - csepicwalletconfig 1.0.0 and...
GHSA-WGX2-6432-J3FW Unsoundness in bigint
An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...
CVE-2021-26198
An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecmaderefbigint in ecma-helpers.c file...
CVE-2021-26198
An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecmaderefbigint in ecma-helpers.c file...
UBUNTU-CVE-2021-26198
An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecmaderefbigint in ecma-helpers.c file...
JerryScript 安全漏洞
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in ecmaderefbigint in ecma-helpers.c in JerryScript version 2.4.0. No details of the vulnerability are provided at this time...
PT-2021-7491 · Mariadb +9 · Mariadb +10
Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5.9 and earlier Description: The issue is related to a use-after-free error in MariaDB, specifically when the BIGINT data type is used. This can be triggered by attackers, potentially leading to a denial of service. The...
Uncontrolled Resource Consumption in json-bigint
Overview Prototype pollution in json-bigint package 1.0.0 may lead to a denial-of-service DoS attack. Recommendation Upgrade to version 1.0.0 or later References - CVE - GitHub Advisory...
Uncontrolled Resource Consumption in json-bigint
Prototype pollution in json-bigint npm package 1.0.0 may lead to a denial-of-service DoS attack...
GHSA-WGFQ-7857-4JCC Uncontrolled Resource Consumption in json-bigint
Prototype pollution in json-bigint npm package 1.0.0 may lead to a denial-of-service DoS attack...
RUSTSEC-2021-0041 Denial of service through parsing payloads with too big exponent
The parseduration::parse function allows for parsing duration strings with exponents like 5e5s where under the hood, the BigInt type along with the pow function are used for such payloads. Passing an arbitrarily big exponent makes the parseduration::parse function to process the payload for a ver...
Denial of service through parsing payloads with too big exponent
The parseduration::parse function allows for parsing duration strings with exponents like 5e5s where under the hood, the BigInt type along with the pow function are used for such payloads. Passing an arbitrarily big exponent makes the parseduration::parse function to process the payload for a ver...
PT-2021-27597
Name of the Vulnerable Software and Affected Versions: Botan affected versions not specified Description: The issue is related to a heap-buffer-overflow read, which occurs in the Botan library. Specifically, the crash happens in the Botan::bigint monty redc function, and it is also related to the...
PT-2021-4095
Name of the Vulnerable Software and Affected Versions JerryScript version 2.4.0 Description The issue is related to a buffer overflow in the ecma deref bigint function of the ecma-helpers.c file. This can be exploited by a remote attacker to cause a denial of service. The estimated number of...