Design/Logic Flaw

podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad...

CVE-2023-31556

podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent...

PoDoFo 缓冲区错误漏洞

PoDoFo is a free portable C++ library open-sourced by PoDoFo. A security vulnerability exists in PoDoFo version 0.10.0, which stems from the function PoDoFo::PdfDictionary::findKeyParent containing a segmentation violation...

CVE-2023-31556

CVE-2023-31556 affects the PoDoFo library: PoDoFo 0.10.0 contains a segmentation violation in PdfDictionary::findKeyParent, enabling a stack-based overflow against vulnerable builds. Public advisories (Snyk) confirm the issue and recommend upgrading Podof o to 0.10.4 or higher; other sources reit...

CVE-2023-31555

podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad...

PT-2023-23386 · Unknown · Podofoinfo

Name of the Vulnerable Software and Affected Versions: podofoinfo version 0.10.0 Description: A segmentation violation was discovered in podofoinfo via the function PoDoFo::PdfObject::DelayedLoad. Recommendations: For podofoinfo version 0.10.0, at the moment, there is no information about a newer...

PoDoFo 安全漏洞

PoDoFo is a free portable C++ library open-sourced by PoDoFo. A security vulnerability exists in PoDoFo version 0.10.0, which stems from the function PoDoFo::PdfObject::DelayedLoad containing a segmentation violation...

CVE-2023-31555

This CVE affects podofoinfo/podofo 0.10.0, where a segmentation violation occurs in PoDoFo::PdfObject::DelayedLoad. The issue is documented across multiple sources (e.g., Snyk) with remediation to upgrade to podofo version 0.10.4 or higher. The NVD/NVD-derived metrics indicate MEDIUM base severit...

CVE-2023-31555

podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad...

frr: out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service

A vulnerability was found in FRRouting. This issue occurs in bgpcapabilitymsgparse in bgpd/bgppacket.c. An out-of-bounds read in the BGP daemon may lead to a segmentation fault and a denial of service...

llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.

...

SUSE CVE-2023-29932

llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperandmlir::OpOperand...

SUSE CVE-2023-29933

llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument...

SUSE CVE-2023-29939

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnvmlir::spirv::TargetEnvAttr...

Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2023-1712)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-1740)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.0 : ncurses (EulerOS-SA-2023-1712)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convertstrings in tinfo/readentry.c in...

EulerOS Virtualization 3.0.2.0 : libxml2 (EulerOS-SA-2023-1740)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option...

EulerOS Virtualization 3.0.2.0 : mariadb (EulerOS-SA-2023-1704)

According to the versions of the mariadb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. CVE-2021-46657 -...

Fedora 37 : libheif (2023-440c8694e5)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-440c8694e5 advisory. Fixes an incompatibility with AOM v3.6.0 and includes a couple of smaller fixes. Also fixes a stack overflow with some crafted images CVE-2023-29659...