7793 matches found
PT-2022-22560 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools version 772e55a2 Description: A floating point exception FPE was discovered in SWFTools via the DCTStream::readMCURow function at /xpdf/Stream.cc. This issue may be related to a problem in the readMCURow function. Recommendations: Fo...
Unbreakable Enterprise kernel security update
5.4.17-2136.311.6 - Revert 'KVM: x86: Print error code in exception injection tracepoint iff valid' Sherry Yang Orabug: 34535896 5.4.17-2136.311.5 - netfilter: nftables: do not allow RULEID to refer to another chain Thadeu Lima de Souza Cascardo Orabug: 34495567 CVE-2022-2586 - netfilter: nftable...
jwcrypto token substitution can lead to authentication bypass
The JWT code can auto-detect the type of token being provided, and this can lead the application to incorrect conclusions about the trustworthiness of the token. Quoting the private disclosure we received : "Under certain circumstances, it is possible to substitute a .. signed JWS with a JWE that...
PT-2022-37289 · Git +1 · Xstream
Name of the Vulnerable Software and Affected Versions: No specific software or version information is provided in the input descriptions. Description: A security exception crash has been reported, involving the com.ctc.wstx.dtd.FullDTDReader.readContentSpec function, which is related to reading...
OSV-2022-914 Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51492 Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.metamodel.BaseNodeMetaModel.getDeclaredPropertyMetaModels...
openSUSE 15 Security Update : mupdf (openSUSE-SU-2022:10126-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10126-1 advisory. - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 ...
GSD-2022-1005295 wifi: rtw89: 8852a: rfk: fix div 0 exception
wifi: rtw89: 8852a: rfk: fix div 0 exception This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...
TensorFlow vulnerable to floating point exception in `Conv2D`
Impact If Conv2D is given empty input and the filter and padding sizes are valid, the output is all-zeros. This causes division-by-zero floating point exceptions that can be used to trigger a denial of service attack. python import tensorflow as tf import numpy as np with tf.device"CPU": also can...
OSV-2022-871 Security exception in java.base/java.util.Collections$UnmodifiableCollection.forEach
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51154 Crash type: Security exception Crash state: java.base/java.util.Collections$UnmodifiableCollection.forEach org.apache.commons.configuration2.tree.NodeTreeWalker.dfs...
CVE-2022-38266
An issue in the Leptonica linked library v1.79.0 allows attackers to cause an arithmetic exception leading to a Denial of Service DoS via a crafted JPEG file...
Design/Logic Flaw
An issue in the Leptonica linked library v1.79.0 allows attackers to cause an arithmetic exception leading to a Denial of Service DoS via a crafted JPEG file...
OSV-2022-865 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51101 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.lang.StringUTF16.newString java.base/java.lang.String.substring...
CVE-2022-38266
An issue in the Leptonica linked library v1.79.0 allows attackers to cause an arithmetic exception leading to a Denial of Service DoS via a crafted JPEG file...
PT-2022-37261 · Git +1 · Xstream
Name of the Vulnerable Software and Affected Versions: No specific software or version information is provided in the input description. Description: A security exception crash has been reported, involving the com.ctc.wstx.dtd.FullDTDReader.readContentSpec function, which interacts with...
CVE-2022-36067
A flaw was found in the vm2 sandbox when running untrusted code, as the sandbox setup does not manage proper exception handling. This flaw allows an attacker to bypass the sandbox protections and gain remote code execution on the hypervisor host or the host which is running the sandbox. Mitigatio...
OSV-2022-852 Security exception in java.base/java.nio.Bits.reserveMemory
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51044 Crash type: Security exception Crash state: java.base/java.nio.Bits.reserveMemory java.base/java.nio.DirectByteBuffer. java.base/java.nio.ByteBuffer.allocateDirect...
Amazon Linux 2022 : wireshark-cli, wireshark-devel (ALAS2022-2022-079)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-079 advisory. A NULL pointer exception flaw was found in Wireshark. A process failure on crafted or malformed input in the IPPUSB dissector can cause a denial of service via a packet injection or a crafted...
Denial Of Service (DoS)
mupdf is vulnerable to denial of service attacks. A Floating point exception flaw was found in Mupdf for zero width pages in muraster.c. which allows an attacker to crash the system...
OSV-2022-791 Security exception in java.base/java.util.Arrays.copyOf
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50631 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOf java.base/java.lang.AbstractStringBuilder.ensureCapacityInternal java.base/java.lang.AbstractStringBuilder.append...