6415 matches found
upb:file_descriptor_parsenew_fuzzer: Segv on unknown address in upb_MiniTable_SetSubEnum
Detailed Report: https://oss-fuzz.com/testcase?key=5622794184687616 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzerasanupb Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: upbMiniTableSetSubEnum...
OpenCV HOGDescriptor Buffer Overflow DoS
The vulnerability of the cv::HOGDescriptor::getDescriptorSize function in the Open Source Computer Vision Library OpenCV software library for computer vision, image processing, and general numerical algorithms is related to the lack of checks for division by zero. Exploiting this vulnerability...
CVE-2022-3263
The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges...
CVE-2022-3263
CVE-2022-3263 affects Measuresoft ScadaPro Server 6.7. The issue is an improper access control (CWE-284) where the ORCHESTRATOR service has inconsistent permissions, allowing a local low-privileged user to modify the service binary path and execute commands with SYSTEM privileges. Public sources ...
SUSE: Security Advisory (SUSE-SU-2022:3312-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK...
GSD-2022-1005091 dmaengine: dw-axi-dmac: ignore interrupt if no descriptor
dmaengine: dw-axi-dmac: ignore interrupt if no descriptor This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...
PT-2025-49698
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the vmw mksstat add ioctl function within the drm/vmwgfx module. This occurs when copying a description string from user space fails, preventing the instance...
upb:file_descriptor_parsenew_fuzzer: Use-of-uninitialized-value in _upb_FieldDef_Resolve
Detailed Report: https://oss-fuzz.com/testcase?key=5146321786372096 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzermsanupb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: upbFieldDefResolve upbFileDefCreate...
CVE-2022-40738
An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4DescriptorListWriter::Action in Core/Ap4Descriptor.h, called from AP4EsDescriptor::WriteFields and AP4Expandable::Write...
UBUNTU-CVE-2022-40738
An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4DescriptorListWriter::Action in Core/Ap4Descriptor.h, called from AP4EsDescriptor::WriteFields and AP4Expandable::Write...
Bento4 code issue vulnerabilities
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 1.6.0-639, which stems from a null pointer dereference in its AP4EsDescriptor::WriteFields and AP4Expandable::Write components when calling the Core/Ap4Descriptor.h component'...
dpdk: DoS when a Vhost header crosses more than two descriptors and exhausts all mbufs
A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK...
Amazon Linux 2022 : polkit, polkit-devel, polkit-libs (ALAS2022-2022-102)
It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-102 advisory. There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion.The highest threat from this vulnerability is to availability. NOTE:...
SUSE-SU-2022:2991-1 Security update for libtirpc
This update for libtirpc fixes the following issues: - CVE-2021-46828: Fixed an uncontrolled file descriptor consumption, which could be exploited by remote attackers to prevent applications using the library from accepting new connections bsc1201680. Non-security fixes: - Exclude ipv6 addresses ...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.17.1.5)
The version of AOS installed on the remote host is prior to 5.17.1.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.17.1.5 advisory. - An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocatetracebuff...
Ubuntu: Security Advisory (USN-4095-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dla-3071 : libtirpc-common - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3071 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3071-1 [email protected] https://www.debian.org/lts/security/...
Critical: exim
Issue Overview: Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the log directory owned by a non-root user, a symlink or hard link attack allows overwriting critical root-owned files anywhere on the filesystem. CVE-2020-28007 Exim 4 before 4.94....
Juniper Junos OS Vulnerability (JSA69719)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69719 advisory. - A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable authentication module PAM of Juniper Networks Junos OS and Junos OS Evolv...