Security update for Mesa

This update for Mesa fixes the following issues: CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId bsc1222040. CVE-2023-45919: Fixed buffer over-read in glXQueryServerString bsc1222041. CVE-2023-45922: Fixed segmentation violation in glXGetDrawableAttribute...

SUSE-SU-2025:20082-1 Security update for Mesa

This update for Mesa fixes the following issues: - CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId bsc1222040. - CVE-2023-45919: Fixed buffer over-read in glXQueryServerString bsc1222041. - CVE-2023-45922: Fixed segmentation violation in glXGetDrawableAttribut...

CVE-2024-55456

lunasvg v3.0.1 was discovered to contain a segmentation violation via the component grayfindcell...

CVE-2024-55456

lunasvg v3.0.1 was discovered to contain a segmentation violation via the component grayfindcell...

CVE-2024-55456

lunasvg v3.0.1 was discovered to contain a segmentation violation via the component grayfindcell...

SUSE SLES15 / openSUSE 15 Security Update : iperf (SUSE-SU-2025:0291-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0291-1 advisory. - Update to version 3.18 - CVE-2024-53580: Fixed a segmentation violation via the iperfexchangeparameters function. bsc1234705 Tenable has...

LunaSVG 安全漏洞

LunaSVG is a standalone C SVG rendering library. A security vulnerability exists in LunaSVG that stems from a segmentation violation via the component grayfindcell inclusion. No detailed vulnerability details are provided at this time...

CVE-2024-55456

CVE-2024-55456 affects lunasvg v3.0.1 with a segmentation fault in the gray_find_cell component. Exploitation is not described in the supplied documents, but the Fedora advisories indicate that lunasvg updates (and unbundling plutovg) are needed to address the issue. Remediation guidance availabl...

OSV-2025-88 Segv on unknown address in ___interceptor_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393435814 Crash type: Segv on unknown address Crash state: interceptorfree ndpifreeflowdata ndpifreeflow...

OSV-2025-85 Segv on unknown address in ndpi_free_flow_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393414230 Crash type: Segv on unknown address Crash state: ndpifreeflowdata fuzzprocesspacket.c...

PT-2025-5669 · Git +1 · Ntopng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash occurs in the following functions:...

PT-2025-5671 · Git +1 · Ntopng

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash state includes references to interceptor free, ndpi fr...

PT-2025-5668 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to a segmentation fault on an unknown address. The crash involved the ndpi serialize string string and ndpi dpi2json functions, and ...

PT-2025-5670 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash was reported due to a segmentation fault on an unknown address. The crash occurred in the ndpi free flow data function, which is located in the...

[SECURITY] [DLA 4038-1] dcmtk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4038-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk January 31, 2025 https://wiki.debian.org/LTS -...

BIT-GOLANG-2024-45340

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file...

openSUSE Security Advisory (SUSE-SU-2025:0291-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: vim (CVE-2025-24014)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-24014 advisory. - Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In sile...

fast-fault has a segmentation fault due to lack of bound check

In this case, the "fastfloat::common::AsciiStr::first" method within the "AsciiStr" struct uses the unsafe keyword to reading from memory without performing bounds checking. Specifically, it directly dereferences a pointer offset by "self.ptr". Because of the above reason, the method accesses...

GHSA-8655-XGH5-5VVQ fast-fault has a segmentation fault due to lack of bound check

In this case, the "fastfloat::common::AsciiStr::first" method within the "AsciiStr" struct uses the unsafe keyword to reading from memory without performing bounds checking. Specifically, it directly dereferences a pointer offset by "self.ptr". Because of the above reason, the method accesses...