13132 matches found
Double free
Bytecode Alliance wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly module because pushpopframerefoffset is mishandled...
WebAssembly Micro Runtime Security Vulnerability
WebAssembly Micro Runtime WAMR is a lightweight, standalone WebAssembly runtime open-sourced by the Bytecode Alliance. With a small footprint, high performance and highly configurable features for applications ranging from embedded, IoT, edge to Trusted Execution Environment TEE, smart contracts,...
CVE-2023-52284
Bytecode Alliance wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly module because pushpopframerefoffset is mishandled...
CVE-2023-52284
WAMR (wasm-micro-runtime) versions prior to 1.3.0 are affected by CVE-2023-52284 due to mishandling of push_pop_frame_ref_offset, which can lead to a double free or memory corruption when processing a valid WebAssembly module. The issue is rooted in the runtime’s frame reference offset handling. ...
CVE-2023-52284: Double Free
Bytecode Alliance wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly module because pushpopframerefoffset is mishandled...
CVE-2023-52284
Bytecode Alliance wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly module because pushpopframerefoffset is mishandled...
CVE-2023-52284
Bytecode Alliance wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly module because pushpopframerefoffset is mishandled...
PT-2023-31956 · Bytecode Alliance · Wasm-Micro-Runtime
Name of the Vulnerable Software and Affected Versions: Bytecode Alliance wasm-micro-runtime versions prior to 1.3.0 Description: The issue arises from the mishandling of push pop frame ref offset, leading to a "double free or corruption" error for a valid WebAssembly module. Recommendations: For...
SUSE: Security Advisory (SUSE-SU-2023:4986-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-51771
CVE-2023-51771 : In MicroHttpServer (through a8ab029), the function _ParseHeader in lib/server.c allows a one-byte recv buffer overflow via a long URI. Reports across sources confirm the issue in the affected build; CVSS v3.1 base score 9.8 (CRITICAL) with network access, no user interaction requ...
Micro HTTP Server Security Vulnerability
Micro HTTP Server is a very simple HTTP server for prototyping by the individual developer Jian-Hong Pan in China. A security vulnerability exists in MicroHttpServer Micro HTTP Server version a8ab029 and earlier versions, which stems from a buffer overflow in ParseHeader in lib/server.c. The...
PT-2023-31889 · Unknown · Microhttpserver
Name of the Vulnerable Software and Affected Versions: MicroHttpServer versions through a8ab029 Description: The issue allows a one-byte recv buffer overflow via a long URI in the ParseHeader function located in lib/server.c. Recommendations: For versions through a8ab029, consider restricting...
SUSE: Security Advisory (SUSE-SU-2023:4902-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
3 Strategic Insights from Cybersecurity Leader Study
Explore the results of a Sapio Research survey commissioned by Trend Micro about how CISOs and other technology leaders are overcoming today’s biggest challenges...
CVE-2023-50965
CVE-2023-50965 affects MicroHttpServer up to version 4398570, where _ReadStaticFiles in lib/middleware.c performs unsafe HTTP request parsing and can overflow a fixed-size stack buffer when given a long URI, enabling remote code execution. The connected exploit documentation provides PoC details ...
Micro HTTP Server Security Vulnerability
Micro HTTP Server is a very simple HTTP server for prototyping by the individual developer Jian-Hong Pan in China. A security vulnerability exists in Micro HTTP Server that stems from allowing stack-based buffer overflows and potential remote code execution...
[SECURITY] Fedora 38 Update: dotnet6.0-6.0.125-1.fc38
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...
SUSE: Security Advisory (SUSE-SU-2023:4869-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
