2002 matches found
RUSTSEC-2024-0439 Race condition could lead to WebAssembly control-flow integrity and type safety violations
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7qmx-3fpx-r45m. For more information see the GitHub-hosted security advisory...
Race condition could lead to WebAssembly control-flow integrity and type safety violations
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7qmx-3fpx-r45m. For more information see the GitHub-hosted security advisory...
Stable Channel Update for Desktop
The Stable channel has been updated to 129.0.6668.70/.71 for Windows, Mac and 129.0.6668.70 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restrict...
CVE-2024-45807: Always-Incorrect Control Flow Implementation
Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's 1.31 is using oghttp as the default HTTP/2 codec, and there are potential bugs around stream management in the codec. To resolve this Envoy will switch off the oghttp2 by default. The impact of this issue is that envoy wi...
The vulnerability of the OpenVSwitch multi-level switch lies in the implementation of incorrect control flow management. This allows attackers to access confidential data and also cause service failures.
The vulnerability of the OpenVSwitch multi-level switch program is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures...
The vulnerability of the Python Requests HTTP request library, related to incorrect implementation of control flow management, allows attackers to access confidential data.
The vulnerability of the Python Requests HTTP request library is related to incorrect implementation of the control flow. Exploiting this vulnerability can allow an attacker to access confidential data...
Amazon Linux 2 : microcode_ctl (ALAS-2024-2631)
The version of microcodectl installed on the remote host is prior to 2.1-47. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2631 advisory. Insufficient control flow management for some IntelR Xeon Processors may allow an authenticated user to potentially enable deni...
java-11-openjdk security update
1:11.0.23.0.9-2.0.3 - Fixes below CVE's - CVE-2024-21131 Improve-UTF8-String-supports - CVE-2024-21138 Better-symbol-storage - Fixes malformed control flow openjdk bug8303466 - CVE-2024-21140 Improved-loop-handling - CVE-2024-21144 Enhance-Pack-200-loading - CVE-2024-21145 Improve-2D-image-handli...
Stable Channel update for Desktop
The Stable channel has been updated to 128.0.6613.119/.120 for Windows, Mac and 128.0.6613.119 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 128.0.6613.120 for Windows and Mac...
ROS-20240827-13
A vulnerability in the UltraJSON package of the Python programming language is related to the implementation of an incorrect control flow control flow. Exploitation of the vulnerability could allow an attacker acting remotely to cause impact data integrity...
CVE-2024-1544
Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular reduction mod n where n is the order of the elliptic curve. Meaning k = r mod n. The division used during the reduction estimates a factor qe by dividing the upper two digits a digit having e....
CVE-2024-1544 ECDSA nonce bias caused by truncation
Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular reduction mod n where n is the order of the elliptic curve. Meaning k = r mod n. The division used during the reduction estimates a factor qe by dividing the upper two digits a digit having e....
CVE-2024-1544
CVE-2024-1544 describes a bias in the ECDSA nonce generation when k is obtained as r mod n, where a control-flow dependent reduction leaks MSB bias in k. The issue can enable lattice-reduction based reconstruction of k for certain curves (e.g., SECP160R1 with about 15 bits of bias). The connected...
CVE-2024-22374
Insufficient control flow management for some IntelR Xeon Processors may allow an authenticated user to potentially enable denial of service via local access...
CVE-2024-21801
Insufficient control flow management in some IntelR TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access...
CVE-2024-21801
Insufficient control flow management in some IntelR TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access...
CVE-2024-21801
Insufficient control flow management in some IntelR TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access...
CVE-2024-21801
CVE-2024-21801 affects Intel® TDX module software prior to version 1.5.05.46.698. The issue is described as insufficient control flow management in the TDX module software, which may allow a privileged local attacker to cause a denial of service. Affected products are Intel® TDX module software v...