CVE-2022-44874

wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component opCallIndirect at /m3exec.h...

wasm3 缓冲区错误漏洞

wasm3 is the fastest WebAssembly interpreter, as well as the most versatile runtime. A security vulnerability exists in wasm3, which stems from a segmentation error via the component opCallIndirect in /m3exec.h...

CVE-2022-44874

wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component opCallIndirect at /m3exec.h...

PT-2023-22486 · Unknown +4 · Llvm-Project +4

Name of the Vulnerable Software and Affected Versions: llvm-project affected versions not specified Description: A segmentation fault was discovered in the llvm-project via the component mlir::Block::getArgument. This issue affects the mlir::Block::getArgument component, which is part of the...

Amazon Linux 2022 : libxml2 (ALAS2022-2022-258)

The version of libxml2 installed on the remote host is prior to 2.10.3-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-258 advisory. - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE...

Amazon Linux AMI : samba (ALAS-2022-1642)

The version of samba installed on the remote host is prior to 4.10.16-20.62. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1642 advisory. It was found that the Kerberos Key Distribution Center KDC delegation feature, Service for User S4U, did not sufficient...

Amazon Linux 2022 : e2fsprogs (ALAS2022-2022-228)

The version of e2fsprogs installed on the remote host is prior to 1.46.5-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-228 advisory. - An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possib...

PT-2022-36028 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: A potential issue exists in the Linux Kernel, specifically in the ti: am65-cpsw module, which may cause a segmentation fault at module unload. The actual impact and attack plausibility have n...

Amazon Linux 2 : openjpeg2 (ALAS-2022-1894)

The version of openjpeg2 installed on the remote host is prior to 2.4.0-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1894 advisory. A flaw was found in the opj2decompress program in openjpeg2 in the way it handles an input directory with a large number of files...

Medium: ncurses

Issue Overview: The ncurses package tic is susceptible to a heap overflow on crafted input. When the terminfo entry-description compiler processes input, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is system availability...

Low: openjpeg2

Issue Overview: A flaw was found in the opj2decompress program in openjpeg2 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation...

Seg fault in `ndarray_tensor_bridge` due to zero and large inputs in Tensorflow

...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in TensorFlow

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of TensorFlow. Vulnerability Details CVEID:CVE-2022-35959 DESCRIPTION: TensorFlow is vulnerable to a denial of service, caused by improper validation of user-supplied input by the implementation of...

CVE-2022-46149

CVE-2022-46149 affects Cap'n Proto and its Rust crate. The vulnerability is an out-of-bounds read caused by logic errors when handling a list-of-pointer type, which can lead to a remote segfault and, with additional actions, memory exfiltration. The issue is present in inlined code and requires r...

An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset typically leading to a segmentation fault.

...

Debian: Security Advisory (DLA-3211-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

advancecomp is vulnerable to denial of service. The vulnerability exists due to a segmentation fault which allows an attacker to cause an application crash...

Denial Of Service (DoS)

advancecomp is vulnerable to denial of service. The vulnerability exists due to a segmentation fault which allows an attacker to cause an application crash...

Denial Of Service (DoS)

advancecomp is vulnerable to denial of service. The vulnerability exists due to a segmentation fault which allows an attacker to cause an application crash...

Debian dla-3211 : frr - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3211 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3211-1 [email protected] https://www.debian.org/lts/security/...