Astra Linux - уязвимость в hdf5

A issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5ACunpinentry, located in H5AC.c. This allows an attacker to cause a Denial of Service attack...

JLSEC-2026-450

Buffer Overflow vulnerability in ncfindentry in tinfo/comphash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...

JLSEC-2026-344

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5Cloadentry of the file /src/H5Centry.c. The manipulation leads to resource consumption. The attack needs to be approached locally. The exploit has been disclosed to the public an...

CVE-2026-3580 Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V

In wolfSSL 5.8.4, constant-time masking logic in sp256getentry2569 is optimized into conditional branches bnez by GCC when targeting RISC-V RV32I with -O3. This transformation breaks the side-channel resistance of ECC scalar multiplication, potentially allowing a local attacker to recover secret...

jfs: fix null ptr deref in dtInsertEntry

...

Linux Distros Unpatched Vulnerability : CVE-2020-19188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in fmtentry function in progs/dumpentry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted...

PT-2025-27295 · Hdf5 +1 · Hdf5 +1

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.14.6 Description: A vulnerability has been found in HDF5, affecting the function H5C load entry of the file /src/H5Centry.c. The manipulation leads to resource consumption. The attack needs to be approached locally. The exploit...

SUSE CVE-2022-49992

In the Linux kernel, the following vulnerability has been resolved: mm/mprotect: only reference swap pfn page if type match Yu Zhao reported a bug after the commit "mm/swap: Add swpoffsetpfn to fetch PFN from swap entry" added a check in swpoffsetpfn for swap type 1: kernel BUG at...

CVE-2020-22039

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inaviaddientry function...

PT-2025-18563 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc2 Description: A slab-out-of-bounds write bug was found in the udf find entry function. This issue was reported by Syzbot and is related to a capacity change from 0 to 2048. The bug is caused by a write ...

Fortanix EnclaveOS Confidential Computing Manager Platform Security Vulnerability

Fortanix EnclaveOS Confidential Computing Manager Platform is a cloud-native service from Fortanix, Inc. that provides a complete solution for confidential computing in the cloud and in local workloads. A security vulnerability exists in Fortanix EnclaveOS Confidential Computing Manager Platform...

PT-2025-26126 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A boundary check has been added in the put entry function to prevent memory out-of-bound access, similar to the check in next entry. This issue is related to the selinux component of t...

SUSE CVE-2020-19187

Buffer Overflow vulnerability in fmtentry function in progs/dumpentry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...

PT-2023-11515 · Ncurses +1 · Ncurses +1

Name of the Vulnerable Software and Affected Versions: ncurses version 6.1 Description: The issue is related to a Buffer Overflow vulnerability in the fmt entry function, located in progs/dump entry.c:1116, which allows remote attackers to cause a denial of service via crafted commands...

PT-2023-11514 · Ncurses +1 · Ncurses +1

Name of the Vulnerable Software and Affected Versions: ncurses version 6.1 Description: The issue is related to a Buffer Overflow vulnerability in the fmt entry function in progs/dump entry.c:1100 of ncurses. This vulnerability allows remote attackers to cause a denial of service via crafted...

PT-2022-33916 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A boundary check issue in the put entry function has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

The vulnerability of the get_next_valid_entry() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the getnextvalidentry function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2021-6518 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to a memory leak in the gf isom oinf read entry function of the MP4Box component in the GPAC multimedia platform. This leak is caused by incorrect memory deallocation before removing the la...

Bn-Uefi-Helper - Helper Plugin For Analyzing UEFI Firmware

Helper plugin for analyzing UEFI firmware. This plugin contains the following features: Apply the correct prototype to the entry point function Fix segments so all segments are RWX and have the correct semantics This allows for global function pointers to be rendered correctly Apply types for cor...

DEBIAN-CVE-2020-10810

An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5ACunpinentry located in H5AC.c. It allows an attacker to cause Denial of Service...