CVE-2022-34913

CVE-2022-34913 설명 md2roff 1.7은 처리할 연속 문자가 많이 포함된 Markdown 파일을 통해 스택 기반 버퍼 오버플로우가 발생합니다. 재현 취약점을 재현하려면 취약한 버전의 md2roff버전 1.7를 다운로드해야 합니다: git clone https://github.com/nereusx/md2roff.git cd md2roff git checkout 7fc373d25c91422454f081c8a717222d77fd7add make 프로젝트가 컴파일되면, 다량의 ASCII 문자 버퍼가 포함된 악성...

CVE-2022-34556

CVE-2022-34556 설명 PicoC v3.2.2에서 variable.c에 NULL 포인터 역참조null pointer dereference가 발견되었습니다. Picoc를 사용하는 모든 프로젝트나 라이브러리도 이 문제의 영향을 받습니다. 예를 들어 picoc-js가 있습니다. 환경 설정 PicoC에서 NULL 포인터 역참조 취약점을 재현하려면 먼저 취약한 버전v3.2.2의 PicoC 라이브러리와 인터프리터를 다운로드하고 컴파일해야 합니다: git clone https://github.com/jpoirier/picoc.gi...

CVE-2026-107373

ExtUtils::Typemaps::STL::String versions before 1.06 for Perl TSTDSTRING typemap may read the SV length before stringifying the argument. The typemap uses $var = std::string SvPVnolen$arg, SvCUR$arg However, evaluation order for C++ arguments is not specified, and some compilers may produce code...

EUVD-2026-96314

ExtUtils::Typemaps::STL::String versions before 1.06 for Perl TSTDSTRING typemap may read the SV length before stringifying the argument. The typemap uses $var = std::string SvPVnolen$arg, SvCUR$arg However, evaluation order for C++ arguments is not specified, and some compilers may produce code...

CVE-2026-107373

The ExtUtils::Typemaps::STL::String module in Perl, versions prior to 1.06 , contains a vulnerability in the T_STD_STRING typemap. The root cause is an unspecified C++ argument evaluation order where some compilers may evaluate SvCUR($arg) before stringifying the argument. If $arg is not a string...

sfop

세그멘테이션 폴트 지향 프로그래밍 SFOP 이것은 세그멘테이션 폴트 지향 프로그래밍Segmentation Fault-Oriented Programming 공격 기법을 위한 아티팩트 저장소입니다. 아티팩트 모음 여기서는 이 저장소의 아티팩트를 간략히 설명합니다. 총 8개의 서로 다른 아티팩트가 있으며, 6개의 PoC 익스플로잇과 실제 프로그램Nginx 및 Ladybird에 대한 2개의 익스플로잇으로 구성되어 있습니다: PoC: bSFOPek: 체인을 사용해 시그널을 등록하고 Early Kill로 공격을 실행하는 완전한 bSFOP...

bigdecimal-segfault-fix

h1. Исправление segfault в BigDecimal В библиотеке BigDecimal Ruby существует ошибка segfault, которая может быть вызвана пользователем при передаче заведомо некорректных значений. Если вы хотите проверить, защищено ли ваше приложение, запустите +example.rb+. Этот скрипт должен завершиться...

Astra Linux – Vulnerability in libde265

It was discovered that Libde265 v1.0.11 contains a segmentation violation through the function decodercontext::processSliceSegmentHeader in decctx.cc...

Astra Linux – Vulnerability in Nasm

In Netwide Assembler NASM 2.15rc10, the SEGV condition can be triggered in toktext within asm/preproc.c by accessing the READ memory...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov5647: Initialize subdev before controls In the function ov5647initcontrols, we call v4l2getsubdevdata, but it is initialized by v4l2i2csubdevinit within the probe function. Currently, this happens after initcontrols...

Astra Linux – Vulnerability in Raptor2

A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon...

PT-2026-105469

Impact Wasmtime's implementation of bulk-data-transfer WebAssembly instructions, such as memory.copy, contains a vulnerability when a preemption via epochs or fuel is combined with altering the store's state or cancelling a computation. To prevent these operations from taking too long Wasmtime...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-12-binutils / gcc-toolset-12-binutils-debuginfo / etc (crlsa-2023_2873)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20232873 advisory. binutils: NULL pointer dereference in bfdelfgetsymbolversionstring leads to segfault CVE-2022-4285 Tenable has extracted the preceding description block directly fr...

Rocky Linux 9 [CIQ] Security Update: perl-JSON-XS / perl-JSON-XS-debuginfo / perl-JSON-XS-debugsource (crlsa-2025_17162)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202517162 advisory. JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 Tenable has extracted the preceding description block directly from th...

Rocky Linux 9 [CIQ] Security Update: ncurses / ncurses-base / ncurses-c++-libs / etc (crlsa-2025_12876)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202512876 advisory. ncurses: segfaulting OOB read CVE-2022-29458 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus has no...

Rocky Linux 10.0 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc (crlsa-2025_9307)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259307 advisory. gnome-remote-desktop: freerdp: Unauthenticated RDP Packet Causes Segfault in FreeRDP Leading to Denial of Service CVE-2025-4478 Tenable has extracted the precedi...

Rocky Linux 8 [CIQ] Security Update: perl-JSON-XS / perl-JSON-XS-debuginfo / perl-JSON-XS-debugsource (crlsa-2025_17163)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202517163 advisory. JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 Tenable has extracted the preceding description block directly from th...

Rocky Linux 8 [CIQ] Security Update: raptor2 / raptor2-debuginfo / raptor2-debugsource / raptor2-devel Multiple Vulnerabilities (crlsa-2021_1842)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20211842 advisory. raptor: heap-based buffer overflows due to an error in calculating the maximum nspace declarations for the XML writer CVE-2017-18926 raptor2: malformed inp...

Rocky Linux 10.0 [CIQ] Security Update: perl-JSON-XS / perl-JSON-XS-debuginfo / perl-JSON-XS-debugsource (crlsa-2025_17119)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202517119 advisory. JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON CVE-2025-40928 Tenable has extracted the preceding description block directly from...

Rocky Linux 8 [CIQ] Security Update: binutils / binutils-debuginfo / binutils-debugsource / etc (crlsa-2023_6236)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20236236 advisory. binutils: NULL pointer dereference in bfdelfgetsymbolversionstring leads to segfault CVE-2022-4285 Tenable has extracted the preceding description block directly fr...