256 matches found
CVE-2021-46669
Summary: CVE-2021-46669 affects MariaDB up to 10.5.9. It allows a use-after-free in convert_const_to_int when the BIGINT data type is used, leading to denial of service. The issue is referenced across multiple advisories and vendor trackers. Affected versions / context: MariaDB up to 10.5.9 (per ...
CVE-2021-46669
Removed by vendor...
CVE-2021-46669
MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used...
CVE-2021-46669
MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used...
CVE-2021-46669: Use After Free
MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used...
Mozilla Firefox Security Advisory (MFSA2020-54) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
GHSA-V935-PQMR-G8V9 Unexpected panics in num-bigint
Impact Two scenarios were reported where BigInt and BigUint multiplication may unexpectedly panic. - The internal mac3 function did not expect the possibility of non-empty all-zero inputs, leading to an unwrap panic. - A buffer was allocated with less capacity than needed for an intermediate...
Unexpected panics in num-bigint
Impact Two scenarios were reported where BigInt and BigUint multiplication may unexpectedly panic. - The internal mac3 function did not expect the possibility of non-empty all-zero inputs, leading to an unwrap panic. - A buffer was allocated with less capacity than needed for an intermediate...
PT-2021-24461
Name of the Vulnerable Software and Affected Versions: num-bigint versions 0.4.1 through 0.4.2 Description: The issue arises from two scenarios where BigInt and BigUint multiplication may unexpectedly panic. This occurs due to the internal mac3 function not expecting non-empty all-zero inputs,...
anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +51 more potentially affected by CVE-2020-35880 via bigint (4.4.3)
bigint CARGO version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on bigint and may be impacted: - anchor-token =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.3.0, =0.2.0, =0.1.0, =0.3.2, =0.0.0, =0.1.0 and more Source cves:...
anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +51 more potentially affected by CVE-2020-35880 via bigint (4.4.3)
bigint CARGO version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on bigint and may be impacted: - anchor-token =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.3.0, =0.2.0, =0.1.0, =0.3.2, =0.0.0, =0.1.0 and more Source cves:...
GHSA-WGX2-6432-J3FW Unsoundness in bigint
An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...
Unsoundness in bigint
An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...
CVE-2021-26198
An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecmaderefbigint in ecma-helpers.c file...
UBUNTU-CVE-2021-26198
An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecmaderefbigint in ecma-helpers.c file...
CVE-2021-26198
An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecmaderefbigint in ecma-helpers.c file...
JerryScript security vulnerabilities
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in ecmaderefbigint in ecma-helpers.c in JerryScript version 2.4.0. No details of the vulnerability are provided at this time...
PT-2021-7491 · Mariadb +9 · Mariadb +10
Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5.9 and earlier Description: The issue is related to a use-after-free error in MariaDB, specifically when the BIGINT data type is used. This can be triggered by attackers, potentially leading to a denial of service. The...
Uncontrolled Resource Consumption in json-bigint
Overview Prototype pollution in json-bigint package 1.0.0 may lead to a denial-of-service DoS attack. Recommendation Upgrade to version 1.0.0 or later References - CVE - GitHub Advisory...