2385 matches found
SUSE CVE-2022-35973
TensorFlow is an open source platform for machine learning. If QuantizedMatMul is given nonscalar input for: mina, maxa, minb, or maxb It gives a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit aca766ac7693bf29ed0df55ad6bfcc78f35e7f48. T...
SUSE CVE-2022-35974
TensorFlow is an open source platform for machine learning. If QuantizeDownAndShrinkRange is given nonscalar inputs for inputmin or inputmax, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...
SUSE CVE-2022-35986
TensorFlow is an open source platform for machine learning. If RaggedBincount is given an empty input tensor splits, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit 7a4591fd4f065f4fa903593bc39b2f79530a74b8. The fix will b...
SUSE CVE-2022-36017
TensorFlow is an open source platform for machine learning. If Requantize is given inputmin, inputmax, requestedoutputmin, requestedoutputmax tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...
kimageformats:kimgio_heif_fuzzer: Segv on unknown address in decoded_picture_buffer::new_image
Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6451081830072320 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: Segv on unknown address Crash Address...
GSD-2023-1001285 objtool: Fix SEGFAULT
objtool: Fix SEGFAULT This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit 0af0e115ff59d638f45416a004cdd8edb38db40c. For more...
GSD-2023-1000923 objtool: Fix SEGFAULT
objtool: Fix SEGFAULT This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit 23a249b1185cdd5bfb6971d1608ba49e589f2288. For more...
GSD-2023-1000466 objtool: Fix SEGFAULT
objtool: Fix SEGFAULT This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit 38b9415abbd703438ebbc6fb74990bd0fbddc5b9. For more detai...
PT-2023-33543 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.17 Description: The issue is related to objtool and may cause a SEGFAULT. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.0.17,...
PT-2023-34362
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to objtool and may cause a SEGFAULT. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.163,...
PT-2023-34000 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to objtool and may cause a SEGFAULT. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.87,...
mupdf:pdf_fuzzer: Segv on unknown address with empty stacktrace
Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=6626875218984960 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL...
Denial Of Service (DoS)
newsboat is vulnerable to denial of service DoS attacks. Unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires the user to set any environment variable in a different thread than the affected functions. The affected functions are...
unicorn:fuzz_emu_mips_32le: Segv on unknown address in helper_tlbwr_mipsel
Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=4952044001951744 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemumips32le Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: Segv on unknown address Crash Address:...
NewStart CGSL MAIN 6.02 : rsyslog Vulnerability (NS-SA-2022-0105)
The remote NewStart CGSL host, running version MAIN 6.02, has rsyslog packages installed that are affected by a vulnerability: - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can...
NewStart CGSL CORE 5.04 / MAIN 5.04 : rsyslog Vulnerability (NS-SA-2022-0103)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has rsyslog packages installed that are affected by a vulnerability: - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is use...
CVE-2022-35260: Out-of-bounds Read
curl can be told to parse a .netrc file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the readworks, write a zero byte beyond its boundary.This will in most cases cause ...
Segfault in `tf.raw_ops.TensorListConcat` in Tensorflow
...