CVE-2025-40929

Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact...

Low: taglib

Issue Overview: TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk. CVE-2023-47466 Affected Packages: taglib Issue Correction: Run dnf update taglib --releasever 2023.8.20250908 or dnf...

OESA-2025-2154 gnuplot security update

Gnuplot is a portable command-line driven graphing utility for Linux, OS/2, MS Windows, OSX, VMS, and many other platforms. The source code is copyrighted but freely distributed i.e., you don't have to pay for it. It was originally created to allow scientists and students to visualize mathematica...

OESA-2025-2155 gnuplot security update

Gnuplot is a portable command-line driven graphing utility for Linux, OS/2, MS Windows, OSX, VMS, and many other platforms. The source code is copyrighted but freely distributed i.e., you don't have to pay for it. It was originally created to allow scientists and students to visualize mathematica...

BIT-ENVOY-2025-54588 Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faults

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. Versions 1.34.0 through 1.34.4 and 1.35.0 contain a use-after-free UAF vulnerability in the DNS cache, causing abnormal process termination. The vulnerability is in Envoy's Dynamic...

rseq: Fix segfault on registration when rseq_cs is non-zero

...

A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.

...

Segmentation fault in fax3encode in libtiff/tif_fax3.c

...

WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild.

...

Linux Distros Unpatched Vulnerability : CVE-2021-34340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCRDECR in decompiler.c file that causes a direct segmentation fault and leads to...

Linux Distros Unpatched Vulnerability : CVE-2021-34341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ming 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF in the decompile.c file that causes a direct segmentation fault and leads to deni...

S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().

...

CLSA-2025-1756928002 iperf3: Fix of CVE-2024-53580

CVE-2024-53580: fix segmentation violation in iperfexchangeparameters function...

CVE-2025-54588

Envoy DNS cache use-after-free in the Dynamic Forward Proxy (DFP) → triggers when a DNS resolution callback fires new resolutions or cancels existing ones, under specific conditions (DFP-enabled, envoy.reloadable_features.dfp_cluster_resolves_hosts enabled, and Host header modified between Dynami...

AVX-Based Timing Side Channel — ASLR Detection

This work demonstrates a technique for detecting ASLR using AVX memory load instructions combined with RDTSCP timing and SIGSEGV detection. It illustrates how side-channel timing measurements can be applied to analyze memory layout randomization...

CVE-2025-57767

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, and 22.5.2, if a SIP request is received with an Authorization header that contains a realm that wasn't in a previous 401 response's WWW-Authenticate header, or an Authorization header wi...

Linux Distros Unpatched Vulnerability : CVE-2025-31179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in gnuplot. The xstrftime function may lead to a segmentation fault, causing a system crash. CVE-2025-31179 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2025-3359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GNUPlot. A segmentation fault via IOstrinitstaticinternal may jeopardize the environment. CVE-2025-3359 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2022-38235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc. CVE-2022-38235 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2020-21723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause ...