CVE-2020-36404

Keystone Engine 0.9.2 has an invalid free in llvmks::SmallVectorImpl::SmallVectorImpl...

CVE-2020-36405

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...

Code injection

Keystone Engine 0.9.2 has an invalid free in llvmks::SmallVectorImpl::SmallVectorImpl...

Design/Logic Flaw

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...

CVE-2020-36405

CVE-2020-36405 concerns Keystone Engine v0.9.2, where a use-after-free bug occurs in llvm_ks::X86Operand::getToken. The NVD entry reports a CVSS 3.1 base score of 7.8 (HIGH) with LOCAL attack vector, no privileges required, but user interaction required, and impacts on confidentiality, integrity,...

CVE-2020-36405

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...

CVE-2020-36404

Keystone Engine 0.9.2 has an invalid free in llvmks::SmallVectorImpl::SmallVectorImpl...

CVE-2020-36404

CVE-2020-36404 affects Keystone Engine 0.9.2. Affected component: llvm_ks::SmallVectorImpl::~SmallVectorImpl (invalid free). Root cause: invalid free in destructor. Exploitation details are not provided in the supplied documents. No remediation/version fix is specified in the connected sources; n...

PT-2021-12043

Name of the Vulnerable Software and Affected Versions: Keystone Engine version 0.9.2 Description: The issue is related to an invalid free in the llvm ks::SmallVectorImpl::SmallVectorImpl function. Recommendations: For Keystone Engine version 0.9.2, at the moment, there is no information about a...

CVE-2020-36404: Release of Invalid Pointer or Reference

Keystone Engine 0.9.2 has an invalid free in llvmks::SmallVectorImpl ::SmallVectorImpl...

Keystone Engine security vulnerabilities

Keystone Engine is an assembler framework. A security vulnerability exists in Keystone Engine that stems from Keystone Engine having an invalid idle in llvmks::SmallVectorImpl::SmallVectorImpl...

Keystone Engine Resource Management Error Vulnerability

Keystone Engine is an assembler framework. version 0.9.2 of Keystone Engine has a security vulnerability for which no details of the vulnerability are currently available...

CVE-2020-36405: Use After Free

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...

PT-2021-12044

Name of the Vulnerable Software and Affected Versions: Keystone Engine version 0.9.2 Description: The issue is related to a use-after-free in llvm ks::X86Operand::getToken. Recommendations: For Keystone Engine version 0.9.2, at the moment, there is no information about a newer version that contai...

Keystone Engine buffer error vulnerability

Keystone Engine is an assembler framework, and a security vulnerability exists in Keystone Engine version 0.9.2, which stems from a stack-based buffer overflow in "processClientServerHello". No details of the vulnerability are currently available...

Insufficient Session Expiration in OpenStack Keystone

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The list of roles provided for an OAuth1 access token is silently ignored. Thus, when an access token is used to request a keystone token, the keystone token contains every role assignment the creator had for the project. Th...

GHSA-6M8P-X4QW-GH5J Insufficient Session Expiration in OpenStack Keystone

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The list of roles provided for an OAuth1 access token is silently ignored. Thus, when an access token is used to request a keystone token, the keystone token contains every role assignment the creator had for the project. Th...

CVE-2021-32624

Keystone 5 is an open source CMS platform to build Node.js applications. This security advisory relates to a newly discovered capability in our query infrastructure to directly or indirectly expose the values of private fields, bypassing the configured access control. This is an access control...

CVE-2021-32624

Keystone 5 is an open source CMS platform to build Node.js applications. This security advisory relates to a newly discovered capability in our query infrastructure to directly or indirectly expose the values of private fields, bypassing the configured access control. This is an access control...

Design/Logic Flaw

Keystone 5 is an open source CMS platform to build Node.js applications. This security advisory relates to a newly discovered capability in our query infrastructure to directly or indirectly expose the values of private fields, bypassing the configured access control. This is an access control...