256 matches found
CVE-2022-29219
Lodestar (TypeScript Ethereum Consensus) before v0.36.0 is vulnerable due to using native JavaScript numbers for uint64 values in AttesterSlashing/ProposerSlashing, causing rounding errors for large values (>2^53). This can yield consensus splits or valid Slashing being treated as invalid, pot...
CVE-2022-29219 Integer Overflow in Lodestar
Lodestar is a TypeScript implementation of the Ethereum Consensus specification. Prior to version 0.36.0, there is a possible consensus split given maliciously-crafted AttesterSlashing or ProposerSlashing being included on-chain. Because the developers represent uint64 values as native javascript...
new packages: perl-Math-BigInt-FastCalc
An update is available for perl-Math-BigInt-FastCalc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see th...
new packages: perl-Math-BigInt
An update is available for perl-Math-BigInt. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
OSV-2022-165 Stack-buffer-overflow in fmt::v8::basic_memory_buffer<unsigned int, 32ul, std::__1::allocator<unsigned in
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44763 Crash type: Stack-buffer-overflow READ 4 Crash state: fmt::v8::basicmemorybufferunsigned int, 32ul, std::1::allocatorunsigned in fmt::v8::detail::bigint::square fmt::v8::detail::bigint::assignpow10...
PT-2022-36837
Name of the Vulnerable Software and Affected Versions fmt versions affected versions not specified Description The issue is related to a stack-buffer-overflow read error. Technical details about the crash include the fmt::v8::detail::bigint::square and fmt::v8::detail::bigint::assign pow10...
fmt:one-arg-fuzzer: Stack-buffer-overflow in fmt::v8::basic_memory_buffer<unsigned int, 32ul, std::__1::allocator<unsigned in
Project: https://github.com/fmtlib/fmt.git Detailed Report: https://oss-fuzz.com/testcase?key=4801828213096448 Project: fmt Fuzzing Engine: libFuzzer Fuzz Target: one-arg-fuzzer Job Type: libfuzzerasanfmt Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7ffcdf0b9e70...
MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.
...
CVE-2021-46669
A use-after-free vulnerability was found in MariaDB. This flaw allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used, resulting in a denial of service. Mitigation Mitigation for this issue is not available, please update the affected package...
MariaDB DoS Vulnerability (MDEV-25638) - Windows
MariaDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...
MariaDB DoS Vulnerability (MDEV-25638) - Linux
MariaDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...
CVE-2021-46669
MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used...
CVE-2021-46669
MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used...
CVE-2021-46669
MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used...
DEBIAN-CVE-2021-46669
MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used...
AZL-8413 CVE-2021-46669 affecting package mariadb for versions less than 10.6.7-1
MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used...
CVE-2021-46669
MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used...
UBUNTU-CVE-2021-46669
MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used...
