474 matches found
CVE-2023-52526: Missing Release of Memory after Effective Lifetime
In the Linux kernel, the following vulnerability has been resolved: erofs: fix memory leak of LZMA global compressed deduplication When stressing microLZMA EROFS images with the new global compressed deduplication feature enabled -Ededupe, I found some short-lived temporary pages weren't properly...
imagemagick:encoder_tiff64_fuzzer: Heap-buffer-overflow in crc64_clmul
Detailed Report: https://oss-fuzz.com/testcase?key=5496855295229952 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertiff64fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x603000004820 Crash State: crc64clmul...
SUSE CVE-2023-37282
An out-of-bounds write vulnerability exists in the VZT LZMARead dmem extraction functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...
DEBIAN-CVE-2023-36861
An out-of-bounds write vulnerability exists in the VZT LZMAreadvarint functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...
UBUNTU-CVE-2023-36861
An out-of-bounds write vulnerability exists in the VZT LZMAreadvarint functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...
PT-2024-12586 · Gtkwave · Gtkwave
Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: An out-of-bounds write issue exists in the VZT LZMA read varint functionality. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger th...
PT-2024-12604 · Gtkwave · Gtkwave
Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: An out-of-bounds write issue exists in the VZT LZMA Read dmem extraction functionality. This can be triggered by a specially crafted .vzt file, potentially leading to arbitrary code execution. A victim wou...
libzip:zip_read_fuzzer: Use-of-uninitialized-value in lzma_index_hash_decode
Detailed Report: https://oss-fuzz.com/testcase?key=5152121978486784 Project: libzip Fuzzing Engine: libFuzzer Fuzz Target: zipreadfuzzer Job Type: libfuzzermsanlibzip Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: lzmaindexhashdecode liblzma.so.5 lzmacode...
Cisco Secure Web Appliance Content Encoding Filter Bypass (cisco-sa-wsa-bypass-vXvqwzsj)
According to its self-reported version, the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass a configured rule, allowing traffic onto a network that should have been blocked. This vulnerability is due to improper...
Oracle Linux 7 : libxml2 (ELSA-2020-1190)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1190 advisory. - Fix CVE-2015-8035 1595697 - Fix CVE-2018-14404 1602817 - Fix CVE-2017-15412 1729857 - Fix CVE-2016-5131 1714050 - Fix CVE-2017-18258 1579211 Tenable...
CVE-2023-39743
lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c...
CVE-2023-39743
lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c...
CVE-2023-39743
lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c...
CVE-2023-39743
lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c...
UBUNTU-CVE-2023-39743
lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c...
lrzip 安全漏洞
lrzip is a compression utility program by the individual developer Con Kolivas. A security vulnerability exists in lrzip-next LZMA v23.01, which stems from the presence of an access conflict...
CVE-2023-39743
lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c...
CVE-2023-39743
lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c...
CVE-2023-39743
CVE-2023-39743 affects lrzip-next LZMA v23.01. The vulnerability arises in the decoding path: an access violation in the component /bz3_decode_block, specifically in src/libbz3.c, as the root cause. Documentation repeatedly states this leads to a potential denial of service or crash (availability...
