64 matches found
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from a security flaw in PTRERR...
PT-2023-23549 · Yasm +1 · Yasm +1
Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0 Description: The issue is related to a use after free via the function error at /nasm/nasm-pp.c. Note that multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...
CVE-2023-31974: Use After Free
yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...
CVE-2023-31974
CVE-2023-31974 concerns yasm v1.3.0 with a use-after-free in the error handling path (/nasm/nasm-pp.c). The vulnerability status is disputed by third parties as per the description, but connected documents consistently identify a use-after-free issue that could affect local exploitation with high...
CVE-2023-31974
yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy...
Low: binutils
Issue Overview: In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file. CVE-2022-38533 Affected Packages: binutils Issue Correction: Run dnf update binutils --releasever 2023.0.20230322 o...
SUSE CVE-2012-4552
Stack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote attackers to execute arbitrary code via a crafted 3d model file that triggers a long error message, as demonstrated by a .ase file...
EulerOS Virtualization 2.9.1 : binutils (EulerOS-SA-2023-1184)
According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain...
EulerOS 2.0 SP8 : binutils (EulerOS-SA-2022-2789)
According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Assertion fail in the displaydebugnames function in binutils/dwarf.c may lead to program crash and denial of service.CVE-2022-38126 An issue was...
Heap overflow
In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file...
CVE-2022-38533
In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file...
CVE-2022-38533
In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file...
CVE-2022-38533
In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file...
CVE-2022-38533
In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file...
osCommerce 跨站脚本漏洞
osCommerce is an open source online shopping e-commerce solution based on the GNUGPL license. osCommerce2 v2.3.4.1 previously had a security vulnerability that stemmed from a security issue with the function tepdberror. No detailed vulnerability details are available...
yasm error function denial of service vulnerability
yasm is yasm open source a completely rewritten Netwide assembler. A denial of service vulnerability exists in yasm version 1.3.0, which stems from a post-release reuse of the error function in modules/preprocs/nasm/nasm-pp.c. An attacker could exploit this vulnerability to cause a denial of...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free via the error function of modules/preprocs/nasm/nasm-pp.c. Exploiting this vulnerability is possible by opening a maliciously crafted file. Remediation There is no fixed version for yasm. References - GitHub Issue Credit:...
Code injection
The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator...