7802 matches found
CVE-2023-48232 Floating point Exception in adjust_plines_for_skipcol() in vim
Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling is enabled and the cpo-settings include the 'n' flag. This may happen when a window border is present and when the wrapped line continues o...
PT-2023-8854
Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2107 Description A floating point exception may occur in Vim when calculating the line offset for overlong lines and smooth scrolling is enabled, along with the 'cpo' settings including the n flag. This issue is relat...
okio: GzipSource class improper exception handling
A flaw was found in SquareUp Okio. A class GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This issue may allow a malicious user to start processing a malformed file, which can result in a Denial of Service DoS...
SUSE-SU-2023:4451-1 Security update for apache2
This update for apache2 fixes the following issues: - CVE-2023-31122: Fixed an out of bounds read in modmacro bsc1216424. Non-security fixes: - Fixed the content type handling in modproxyhttp2 bsc1214357. - Fixed a floating point exception crash bsc1207399...
CVE-2023-22290
Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable denial of service via network access...
Privilege escalation
Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable denial of service via network access...
CVE-2023-22290
CVE-2023-22290 describes an uncaught exception in Intel® Unison™ software that may allow an authenticated user to trigger a denial of service over the network. The NVD/Intel entry lists a CVSS v3.1 base score of 6.5 (Network, Low complexity, Low privileges, Availability impact) and notes the vuln...
CVE-2023-22290
Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable denial of service via network access...
kernel: x86/mm: Randomize per-cpu entry area
A possible unauthorized memory access flaw was found in the Linux kernel cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. This issue could allow a local user to gain access to some important data with expected locatio...
kernel: x86/mm: Randomize per-cpu entry area
A possible unauthorized memory access flaw was found in the Linux kernel cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. This issue could allow a local user to gain access to some important data with expected locatio...
OSV-2023-1157 Security exception in org.apache.lucene.util.ArrayUtil.growExact
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64141 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.growExact org.apache.lucene.util.ArrayUtil.grow org.apache.lucene.util.BytesRefBuilder.grow...
PT-2023-18401 · Intel · Intel Unison
Name of the Vulnerable Software and Affected Versions: Intel Unison affected versions not specified Description: The issue allows an authenticated user to potentially enable denial of service via network access due to an uncaught exception in some Intel Unison software. Recommendations: At the...
PT-2023-35583 · Apache · Apache Lucene
Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: A security exception crash has been reported in Apache Lucene. The crash occurs in the org.apache.lucene.util.ArrayUtil.growExact function, which is called by...
SUSE-SU-2023:4431-1 Security update for apache2
This update for apache2 fixes the following issues: - CVE-2023-31122: Fixed an out of bounds read in modmacro bsc1216424. Non-security fixes: - Fixed the content type handling in modproxyhttp2 bsc1214357. - Fixed a floating point exception crash bsc1207399...
OSV-2023-1152 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64130 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.ByteBuffer.position java.base/sun.nio.cs.UTF8.updatePositions...
PT-2023-35580 · Unknown +1 · Com.Puppycrawl.Tools.Checkstyle +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash has been reported, involving the com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr and...
OSV-2023-1136 Security exception in org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64051 Crash type: Security exception Crash state: org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.readRecordSID...
The vulnerability of the X509_check function in the OpenConnect client allows a hacker to gain access to confidential data.
The vulnerability of the X509check function in the OpenConnect client involves deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...
NewStart CGSL MAIN 6.06 : net-snmp Multiple Vulnerabilities (NS-SA-2023-0133)
The remote NewStart CGSL host, running version MAIN 6.06, has net-snmp packages installed that are affected by multiple vulnerabilities: - handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker w...