PT-2023-29792

Name of the Vulnerable Software and Affected Versions gifsicle version 1.94 Description A floating point exception FPE issue was discovered in gifsicle through the resize stream function at src/xform.c. This issue can cause problems when processing certain inputs. Recommendations For gifsicle...

CVE-2020-15266: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Tensorflow before version 2.4.0, when the boxes argument of tf.image.cropandresize has a very large value, the CPU kernel implementation receives it as a C++ nan floating point value. Attempting to operate on this is undefined behavior which later produces a segmentation fault. The issue is...

PT-2022-8876 · Upx +2 · Upx +2

Name of the Vulnerable Software and Affected Versions: UPX version 4.0.0 Description: A floating point exception was discovered in the elf lookup function in p lx elf.cpp via a crafted Mach-O file. Recommendations: For UPX version 4.0.0, consider updating to a newer version that contains a fix fo...

PT-2022-8865 · Upx +1 · Upx +1

Name of the Vulnerable Software and Affected Versions: UPX affected versions not specified Description: A floating point exception issue was discovered in the PackLinuxElf64::invert pt dynamic function of the p lx elf.cpp file. An attacker with a crafted input file could trigger this issue, causi...

PT-2020-6855 · Openexr +3 · Openexr +3

Name of the Vulnerable Software and Affected Versions: OpenEXR affected versions not specified Description: A flaw was found in OpenEXR's TiledInputFile functionality, allowing an attacker to trigger a floating-point exception error by submitting a crafted single-part non-image. This flaw is...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c, resulting in a floating point exception via and allows an attacker to execute arbitrary code via a malicious WMV file...

Arbitrary Code Execution

SQLite is vulnerable to arbitrary code execution. A stack-based buffer overflow and integer overflow in the sqlite3VXPrintf function in printf.c allows an attacker to execute arbitrary code on the host OS due to improperly handling of precision and width values during floating-point conversions...

PT-2020-6265 · Unknown +9 · Libvncserver +9

Name of the Vulnerable Software and Affected Versions: LibVNCServer version 0.9.12 Description: The issue is related to a divide by zero problem in LibVNCServer, which can be exploited by a remote attacker to cause a denial of service. A malicious client can send a specially crafted message to th...

openSUSE Security Update : nasm (openSUSE-2020-952)

This update for nasm fixes the following issues : nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. - Fix crash due to multiple errors or warnings during the code generation pass if a list file i...

openSUSE: Security Advisory for nasm (openSUSE-SU-2020:0952-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for nasm (moderate)

openSUSE Security Update: Security update for nasm Announcement ID: openSUSE-SU-2020:0954-1 Rating: moderate References: 1084631 1086186 1086227 1086228 1090519 1090840 1106878 1107592 1107594 1108404 1115758 1115774 1115795 1173538 Cross-References: CVE-2018-1000667 CVE-2018-10016 CVE-2018-10254...

SUSE-SU-2020:1626-1 Security update for poppler

This update for poppler fixes the following issues: These security issues were fixed: - CVE-2017-14617: Fixed a floating point exception in Stream.cc, which may lead to a potential attack when handling malicious PDF files. bsc1060220 - CVE-2017-1000456: Validate boundaries in TextPool::addWord to...

FreeBSD : Sane -- Multiple Vulnerabilities (28481349-7e20-4f80-ae1e-e6bf48d4f17c)

The Sane Project reports : epson2: fixes CVE-2020-12867 GHSL-2020-075 and several memory management issues found while addressing that CVE epsonds: addresses out-of-bound memory access issues to fix CVE-2020-12862 GHSL-2020-082 and CVE-2020-12863 GHSL-2020-083, addresses a buffer overflow fixing...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the signal handling on PowerPC-based systems that allowed a local user to cause a denial of service floating point corruption...

NVIDIA D3D10 Driver nvwgf2umx_cfg.dll nvwg FTOI code execution vulnerability

Summary An exploitable code execution vulnerability exists in the nvwg functionality of NVIDIA Corporation NVIDIA D3D10 driver nvwgf2umxcfg.dll, version 442.50 - 26.21.14.4250. A specially crafted shader could allow an adversary to execute remote code. An attacker can use this vulnerability to...

Linux: Read /etc/ntp.conf (KB)

The ntpd program is an operating system daemon which sets and maintains the system time of day in synchronism with Internet standard time servers. It is a complete implementation of the Network Time Protocol NTP version 4, but also retains compatibility with version 3, as defined by RFC-1305, and...

Linux fpregs_state_valid Heap Buffer Overflow DoS

The vulnerability of the fpregsstatevalid function arch/x86/include/asm/fpu/internal.h in the Linux operating system is due to a “race condition”. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

GLSA-202003-13 : musl: x87 floating-point stack adjustment imbalance

The remote host is affected by the vulnerability described in GLSA-202003-13 musl: x87 floating-point stack adjustment imbalance A flaw in musl libcs arch-specific math assembly code for i386 was found which can lead to x87 stack overflow in the execution of subsequent math code. Impact : Impact...

musl: x87 floating-point stack adjustment imbalance

Background musl is an implementation of the C standard library built on top of the Linux system call API, including interfaces defined in the base language standard, POSIX, and widely agreed-upon extensions. Description A flaw in musl libc’s arch-specific math assembly code for i386 was found whi...

MGASA-2020-0096 Updated upx packages fix security vulnerabilities

The updated packages fix security vulnerabilities: PackLinuxElf64::unpack in plxelf.cpp in UPX 3.95 allows remote attackers to cause a denial of service double free, limit the ability of a malware scanner to operate on the entire original data, or possibly have unspecified other impact via a...