Security Bulletin: IBM Spectrum Scale (GPFS) Hadoop connector is affected by a security vulnerability (CVE-2022-25168)

Summary A security vulnerability has been identified in the IBM Spectrum Scale GPFS Hadoop connector which could allow a local authenticated attacker to execute arbitrary commands on the system. Fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2022-25168 DESCRIPTION: Apach...

EulerOS 2.0 SP9 : gcc (EulerOS-SA-2022-2764)

According to the versions of the gcc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In gcc, an internal compiler error in matchreload function at lra-constraints.c may cause a crash through a crafted input file. CVE-2020-35536 - In...

Denial Of Service (DoS)

libjpeg-turbo is vulnerable to denial of service. The vulnerability exists because of a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo which allows an attacker to send a crafted input file causing an application crash...

Exploit for Argument Injection in Atlassian Bitbucket

CVE-2022-36804-PoC Multithreaded exploit script for CVE-2022-3...

CVE-2022-3008 Command Injection on tinygltf

The tinygltf library uses the C library function wordexp to perform file path expansion on untrusted paths that are provided from the input file. This function allows for command injection by using backticks. An attacker could craft an untrusted path input that would result in a path expansion. W...

CVE-2022-2980

A NULL pointer dereference vulnerability was found in vim's domouse function of the src/mouse.c file. The issue occurs with a mouse click when it is not initialized. This flaw allows an attacker to trick a user into opening a specially crafted input file, triggering the vulnerability that could...

CVE-2020-35538

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

ALPINE-CVE-2020-35538

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

AZL-10824 CVE-2020-35538 affecting package libjpeg-turbo for versions less than 2.1.4-1

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

CVE-2020-35538

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

CVE-2020-35536

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2020-35538

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

CVE-2020-35538

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

CVE-2020-35538

A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...

CVE-2020-35538

CVE-2020-35538: A crafted input file could cause a NULL pointer dereference in jcopy_sample_rows() within libjpeg-turbo. The IBM Cloud Pak for Business Automation bulletin lists this CVE as affecting Cloud Pak foundational services, indicating a library-level issue that can trigger a crash/denial...

GCC 安全漏洞

GCC is a collection of GNU compilers. It is primarily used to compile the C and C++ languages. A security vulnerability exists in GCC, which stems from an internal compiler error in the matchreload function in lra-constraints.c that causes the input file to crash...

CVE-2020-35538

A vulnerability was found in libjpeg-turbo where a segmentation fault occurs due to a NULL pointer passing to jcopysamplerows. You may see this error statement: "Corrupt JPEG data: premature end of data segment". When processed by a libjpeg-turbo, a crafted input file could cause a crash, leading...

CVE-2020-35537

In gcc, a crafted input source file could cause g++ to crash during compilation when provided certain optimization flags. The problem resides in the ipcpstorevrresults function in gcc/ipa-cp.c...

CVE-2020-35536

In gcc, an internal compiler error in matchreload function at lra-constraints.c may cause a crash through a crafted input file...

SUSE-SU-2022:2896-1 Security update for raptor

This update for raptor fixes the following issues: - CVE-2020-25713: Fixed an out of bounds access triggered via a malformed input file bsc1178903...