12165 matches found
CVE-2023-31724
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function dodirective at /nasm/nasm-pp.c...
yasm å®å Øę¼ę“
yasm is a completely rewritten Netwide assembler from the yasm open source. A security vulnerability exists in yasm version 1.3.0.55.g101bc, which stems from a segmentation violation via the inclusion of the function expandmmacparams in /nasm/nasm-pp.c. The vulnerability is caused by the inclusio...
CVE-2023-31723
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expandmmacparams at /nasm/nasm-pp.c...
CVE-2023-31724
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function dodirective at /nasm/nasm-pp.c...
CVE-2023-31723
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expandmmacparams at /nasm/nasm-pp.c...
PT-2023-23436 Ā· YasmĀ +1 Ā· YasmĀ +1
Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0.55.g101bc Description: A segmentation violation was discovered in yasm via the function do directive at /nasm/nasm-pp.c. Recommendations: For yasm version 1.3.0.55.g101bc, consider restricting access to the do directive...
CVE-2023-31723
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expandmmacparams at /nasm/nasm-pp.c...
PT-2023-23435 Ā· YasmĀ +1 Ā· YasmĀ +1
Name of the Vulnerable Software and Affected Versions: yasm version 1.3.0.55.g101bc Description: A segmentation violation was discovered in yasm via the function expand mmac params at /nasm/nasm-pp.c. Recommendations: For yasm version 1.3.0.55.g101bc, as a temporary workaround, consider disabling...
CVE-2023-31723
This CVE affects yasm 1.3.0.55.g101bc, where a segmentation fault occurs in the function expand_mmac_params in nasm/nasm-pp.c. The vulnerability is described across multiple sources (NVD, OSV, Nessus, PT-SEC) as a local issue with a high impact on availability (CVSS v3.1: AV:L/AC:L/PR:N/UI:R/S:U/...
CVE-2023-31724
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function dodirective at /nasm/nasm-pp.c...
CVE-2021-31239
A vulnerability was found in SQLite, where a segmentation fault occurs when appendvfs attempts to open a non-existent file. This flaw allows a remote attacker to cause a denial of service...
frr: out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service
A vulnerability was found in FRRouting. This issue occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c. An out-of-bounds read in the BGP daemon may lead to a segmentation fault and a denial of service...
Medium: ImageMagick
Issue Overview: A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulti...
EulerOS Virtualization 2.10.1 : libxml2 (EulerOS-SA-2023-1893)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option...
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-1924)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-1893)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
New 'MichaelKors' Ransomware-as-a-Service Targeting Linux and VMware ESXi Systems
A new ransomware-as-service RaaS operation called MichaelKors has become the latest file-encrypting malware to target Linux and VMware ESXi systems as of April 2023. The development points to cybercriminal actors increasingly setting their eyes on the ESXi, cybersecurity firm CrowdStrike said in ...
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow due to a segmentation violation in the findKeyParent function in PdfDictionary.cpp. Remediation Upgrade podofo to version 0.10.4 or higher. References - GitHub Commit - GitHub Issue...
Denial Of Service (DoS)
workerd is vulnerable to Denial of Service DoS attacks. The forEach function may wind up reading from the incorrect position in memory if a FormData object has more than 2^31 items, which would result in a segmentation fault, causing the application to crash...
Oracle Linux 9 : frr (ELSA-2023-2202)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2202 advisory. 8.3.1-5 - Resolves: 2147522 - It is not possible to run FRR as a non-root user 8.3.1-4 - Resolves: 2144500 - AVC error when reloading FRR with provided reload...