SUSE SLES15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2023:1756-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1756-1 advisory. - CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. bsc1209141 Tenable has extracted the preceding...

SUSE-SU-2023:1756-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. bsc1209141...

Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2023-150)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-150 advisory. A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file tha...

CVE-2023-28625

modauthopenidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when OIDCStripCookies is set and a crafted cookie supplied, a NULL pointer dereference would occur,...

Null pointer dereference

modauthopenidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when OIDCStripCookies is set and a crafted cookie supplied, a NULL pointer dereference would occur,...

CVE-2023-28625

modauthopenidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when OIDCStripCookies is set and a crafted cookie supplied, a NULL pointer dereference would occur,...

SUSE-SU-2023:1734-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. bsc1209141...

SUSE-SU-2023:1733-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. bsc1209141...

CVE-2023-28625

modauthopenidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In versions 2.0.0 through 2.4.13.1, when OIDCStripCookies is set and a crafted cookie supplied, a NULL pointer dereference would occur,...

Denial Of Service (DoS)

TensorFlow is vulnerable to Denial Of Service DoS. The vulnerability exists due to the improper validation checks in the library, which leads to a segmentation fault with a null pointer dereference in ParallelConcat with XLA, allowing an attacker to cause an application crash when the given...

Denial Of Service (DoS)

ImageMagick is vulnerable to Denial Of Service DoS. The vulnerability exists in DrawPrimitive function of draw.c which allows an attacker to pass a specially crafted SVG file that leads to a segmentation fault leading to an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to Denial of Service DoS attacks. The vulnerability exists due to bincountop when XLA is enabled, which allows an attacker to cause a segmentation fault when given a parameter weights that is neither the same shape as parameter arr nor a length-0 tensor, causing the...

Denial Of Service (DoS)

tensorflow is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause an integer overflow in gifio.cc leading to segmentation fault when opening multiframe gifs, causing the application to crash...

Denial Of Service (DoS)

tensorflow is vulnerable to Denial of Service DoS attacks. A malicious user is able to trigger a null pointer exception in the SummarizeArray function when the parameter summarize of tf.rawops.Print is zero, leading to a segmentation fault, causing the application to crash...

CVE-2023-26924

A vulnerability was found in LLVM. This security flaw leads to a segmentation fault in mlir::outlineSingleBlockRegion...

CBL Mariner 2.0 Security Update: fribidi (CVE-2022-25310)

The version of fribidi installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-25310 advisory. - A segmentation fault SEGV flaw was found in the Fribidi package and affects the fribidiremovebidimarks...

Mageia: Security Advisory (MGASA-2023-0052)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2023-0041)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2023-0018)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-26924

LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes "Language front-ends ... for which a malicious input file can cause undesirable behavior."...