201 matches found
CVE-2021-46669
MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used...
CVE-2021-46669
Summary: CVE-2021-46669 affects MariaDB up to 10.5.9. It allows a use-after-free in convert_const_to_int when the BIGINT data type is used, leading to denial of service. The issue is referenced across multiple advisories and vendor trackers. Affected versions / context: MariaDB up to 10.5.9 (per ...
CVE-2021-46669
Removed by vendor...
Mozilla Firefox Security Advisory (MFSA2020-54) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
GHSA-V935-PQMR-G8V9 Unexpected panics in num-bigint
Impact Two scenarios were reported where BigInt and BigUint multiplication may unexpectedly panic. - The internal mac3 function did not expect the possibility of non-empty all-zero inputs, leading to an unwrap panic. - A buffer was allocated with less capacity than needed for an intermediate...
Unexpected panics in num-bigint
Impact Two scenarios were reported where BigInt and BigUint multiplication may unexpectedly panic. - The internal mac3 function did not expect the possibility of non-empty all-zero inputs, leading to an unwrap panic. - A buffer was allocated with less capacity than needed for an intermediate...
Unsoundness in bigint
An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...
anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +93 more potentially affected by CVE-2020-35880 via bigint (4.4.3)
bigint CARGO version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on bigint and may be impacted: - anchor-token =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1 - csepicwalletapi 1.0.0 - csepicwalletconfig 1.0.0 and...
GHSA-WGX2-6432-J3FW Unsoundness in bigint
An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...
CVE-2021-26198
An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecmaderefbigint in ecma-helpers.c file...
CVE-2021-26198
An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecmaderefbigint in ecma-helpers.c file...
UBUNTU-CVE-2021-26198
An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecmaderefbigint in ecma-helpers.c file...
JerryScript 安全漏洞
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in ecmaderefbigint in ecma-helpers.c in JerryScript version 2.4.0. No details of the vulnerability are provided at this time...
PT-2021-7491 · Mariadb +9 · Mariadb +10
Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5.9 and earlier Description: The issue is related to a use-after-free error in MariaDB, specifically when the BIGINT data type is used. This can be triggered by attackers, potentially leading to a denial of service. The...
Uncontrolled Resource Consumption in json-bigint
Overview Prototype pollution in json-bigint package 1.0.0 may lead to a denial-of-service DoS attack. Recommendation Upgrade to version 1.0.0 or later References - CVE - GitHub Advisory...
GHSA-WGFQ-7857-4JCC Uncontrolled Resource Consumption in json-bigint
Prototype pollution in json-bigint npm package 1.0.0 may lead to a denial-of-service DoS attack...
Uncontrolled Resource Consumption in json-bigint
Prototype pollution in json-bigint npm package 1.0.0 may lead to a denial-of-service DoS attack...
Denial of service through parsing payloads with too big exponent
The parseduration::parse function allows for parsing duration strings with exponents like 5e5s where under the hood, the BigInt type along with the pow function are used for such payloads. Passing an arbitrarily big exponent makes the parseduration::parse function to process the payload for a ver...
RUSTSEC-2021-0041 Denial of service through parsing payloads with too big exponent
The parseduration::parse function allows for parsing duration strings with exponents like 5e5s where under the hood, the BigInt type along with the pow function are used for such payloads. Passing an arbitrarily big exponent makes the parseduration::parse function to process the payload for a ver...