753 matches found
Ubuntu: Security Advisory (USN-6258-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6258-1: LLVM Toolchain vulnerabilities
It was discovered that LLVM Toolchain did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted MLIR file, an attacker could possibly use this issue to cause LLVM Toolchain to crash, resulting in a denial of service. CVE-2023-29932,...
Ubuntu 22.04 LTS / 23.04 : LLVM Toolchain vulnerabilities (USN-6258-1)
The remote Ubuntu 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6258-1 advisory. It was discovered that LLVM Toolchain did not properly manage memory under certain circumstances. If a user were tricked into opening a specially...
CVE-2023-29935
A flaw was found in the llvm package. An assertion failure in !replacements.countop && "operation was already replaced" may lead to a crash...
CVE-2023-29934
A flaw was found in the llvm package. A segmentation fault via the mlir::Type::getDialect component may lead to a crash...
CVE-2023-29933
A flaw was found in the llvm package. A segmentation fault via the mlir::Block::getArgument component may lead to a crash...
CVE-2023-29932
A flaw was found in the llvm package. A segmentation fault via the mlir::IROperandmlir::OpOperand component may lead to a crash...
CVE-2023-29941
A flaw was found in the llvm package. A segmentation fault via the matchAndRewriteSortOpmlir::sparsetensor::SortOp component may lead to a crash...
CVE-2023-29942
A flaw was found in the llvm package. A segmentation fault via the mlir::Type::isamlir::LLVM::LLVMVoidType component may lead to a crash...
OSV-2023-562 Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60538 Crash type: Heap-buffer-overflow READ 4 Crash state: llvm::DataLayout::getIndexedOffsetInType InterpreterStackFrame::ResolveConstantValue InterpreterStackFrame::EvaluateValue...
llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.
...
SUSE CVE-2023-29932
llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperandmlir::OpOperand...
SUSE CVE-2023-29933
llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument...
SUSE CVE-2023-29935
llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.countop && "operation was already replaced...
SUSE CVE-2023-29941
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOpmlir::sparsetensor::SortOp...
SUSE CVE-2023-29939
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnvmlir::spirv::TargetEnvAttr...
AZL-26694 CVE-2023-29942 affecting package rust for versions less than 1.72.0-1
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isamlir::LLVM::LLVMVoidType...
DEBIAN-CVE-2023-29939
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnvmlir::spirv::TargetEnvAttr...
