890 matches found
SUSE CVE-2021-33796
In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service...
Moderate: Red Hat Security Advisory: Red Hat Service Interconnect 1.4 Release security update
This is release 1.4 of the rpms for Red Hat Service Interconnect. Red Hat Service Interconnect 1.4 introduces a service network, linking TCP and HTTP services across the hybrid cloud. A service network enables communication between services running in different network locations or sites. It allo...
CVE-2021-33796
In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service...
DEBIAN-CVE-2021-33796
In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service...
CVE-2021-33796
In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service...
Design/Logic Flaw
In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service...
CVE-2021-33796
In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service...
CVE-2021-33796
CVE-2021-33796 affects MuJS prior to 1.1.2, where a use-after-free in the regexp source property access can lead to denial of service. This is documented across multiple sources (NVD/OSV/SUSE et al.) with the same description. The connected documents do not provide a vendor patch or concrete miti...
CVE-2021-33796
In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service...
PT-2023-12222
Name of the Vulnerable Software and Affected Versions MuJS versions prior to 1.1.2 Description A use-after-free flaw in the regexp source property access may cause denial of service. Recommendations For MuJS versions prior to 1.1.2, update to version 1.1.2 or later to resolve the issue...
CVE-2021-33796: Use After Free
In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service...
lucene:IndexSearchFuzzer: Security exception in org.apache.lucene.util.automaton.RegExp.parseConcatExp
Project: https://github.com/apache/lucene.git Detailed Report: https://oss-fuzz.com/testcase?key=5139324912664576 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: IndexSearchFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
golang: regexp/syntax: limit memory used by parsing regexps
A flaw was found in the golang package, where programs that compile regular expressions from untrusted sources are vulnerable to memory exhaustion or a denial of service. The parsed regexp representation is linear in the input size. Still, in some cases, the constant factor can be as high as...
SUSE-SU-2023:2598-1 Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: golang-github-prometheus-prometheus: - Security issues fixed in this version update to 2.37.6: CVE-2022-46146: Fix basic authentication bypass vulnerability bsc1208049, jscPED-3576 CVE-2022-41715: Update our regexp...
CVE-2022-25883
Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...
Medium: glib2
Issue Overview: PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a...
RHEL 8 : Image Builder (RHSA-2023:2780)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2780 advisory. Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood...
Moderate: Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.1.1 security update
Secondary Scheduler Operator for Red Hat OpenShift 1.1.1 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...
Moderate: Red Hat Security Advisory: grafana security update
An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
RHEL 8 : git-lfs (RHSA-2023:2866)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:2866 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while...