Lucene search
+L

90 matches found

Mend
Mend
•added 2024/06/28 9:18 p.m.•10 views

CVE-2024-38533

ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. There is possible invalid stack access due to the addresses used to access the stack not properly being converted to cells. This issue has been patched in version 1.5.0...

6.9CVSS5.7AI score0.00263EPSS
SaveExploits0References3
CVE
CVE
•added 2024/06/28 9:18 p.m.•88 views

CVE-2024-38533

The CVE-2024-38533 entry concerns ZKsync Era, a Layer 2 rollup for Ethereum. The issue is an invalid stack access caused by addresses used to access the stack not being properly converted to cells. Affected versions are prior to 1.5.0; the vulnerability is mitigated by upgrading to version 1.5.0....

6.5CVSS5.7AI score0.00263EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/28 12:00 a.m.•22 views

PT-2024-28059 · Unknown · Zksync Era

Name of the Vulnerable Software and Affected Versions: ZKsync Era versions prior to 1.5.0 Description: ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. The issue arises from possible invalid stack access due to the addresses used to access the stack not properly...

6.5CVSS5.8AI score0.00263EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/06/28 12:00 a.m.•20 views

ZKsync Era Security Vulnerability

ZKsync Era is an open source compiler from Matter Labs. A security vulnerability exists in ZKsync Era versions prior to 1.5.0, which stems from the address used to access the stack not being properly converted to a unit, and therefore invalid stack access may exist...

6.5CVSS5.7AI score0.00263EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/28 12:00 a.m.•8 views

CVE-2024-38533: Out-of-bounds Write

ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. There is possible invalid stack access due to the addresses used to access the stack not properly being converted to cells. This issue has been patched in version 1.5.0...

6.5CVSS5.7AI score0.00263EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•28 views

RHEL 5 : byacc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - byacc: Potential out of bounds of allocated stack access CVE-2008-3196 Note that Nessus has not tested for this iss...

7.8CVSS5.9AI score0.01449EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/05/21 1:59 a.m.•18 views

SUSE CVE-2024-35905

In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int...

7.8CVSS6.3AI score0.00225EPSS
SaveExploits0References64
RedhatCVE
RedhatCVE
•added 2024/05/20 11:14 a.m.•49 views

CVE-2024-35905

A flaw was found in the Linux kernel. An integer overflow vulnerability exists in the access size of a stack, such that the size of the access stack can appear negative as a result of overflowing its signed int representation. This issue can result in denial of service...

5.5CVSS6.5AI score0.00225EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2024/05/19 9:15 a.m.•20 views

DEBIAN-CVE-2024-35905

In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int...

7.8CVSS6.5AI score0.00225EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/19 9:15 a.m.•23 views

CVE-2024-35905

In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int...

7.8CVSS6.9AI score0.00225EPSS
SaveExploits0References8
osv_ubuntu
osv_ubuntu
•added 2024/05/19 9:15 a.m.•15 views

UBUNTU-CVE-2024-35905

In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int...

7.8CVSS6.5AI score0.00225EPSS
SaveExploits0References21
UbuntuCve
UbuntuCve
•added 2024/05/19 9:15 a.m.•29 views

CVE-2024-35905

In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int...

7.8CVSS6.3AI score0.00225EPSS
SaveExploits0References20
osv_cve
osv_cve
•added 2024/05/19 8:34 a.m.•35 views

CVE-2024-35905 bpf: Protect against int overflow for stack access size

In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int...

7.8CVSS6.3AI score0.00225EPSS
SaveExploits0References11
CVE
CVE
•added 2024/05/19 8:34 a.m.•232 views

CVE-2024-35905

CVE-2024-35905 is a Linux kernel issue where a patch re-introduced protection against negative stack-access sizes in BPF code. The fix guards against out-of-bounds accesses in check_stack_range_initialized() when an access size can overflow its signed int representation. The vulnerability was mit...

7.8CVSS6.3AI score0.00225EPSS
SaveExploits0References8Affected Software1
Vulnrichment
Vulnrichment
•added 2024/05/19 8:34 a.m.•40 views

CVE-2024-35905 bpf: Protect against int overflow for stack access size

In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int...

7.8CVSS6.3AI score0.00225EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2024/02/29 7:03 a.m.•31 views

CVE-2021-46965

In the Linux kernel, the following vulnerability has been resolved: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access Cast to char in order to avoid unintentionally accessing the stack. Notice that data is of type u32, so any increment to will be in the order of 4-byte chunks, and thi...

4.4CVSS6.6AI score0.0023EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2024/02/29 3:56 a.m.•17 views

SUSE CVE-2021-46965

In the Linux kernel, the following vulnerability has been resolved: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access Cast &data to char in order to avoid unintentionally accessing the stack. Notice that data is of type u32, so any increment to &data will be in the order of 4-byte...

7.1CVSS5.8AI score0.0023EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/02/27 7:04 p.m.•21 views

CVE-2021-46965

In the Linux kernel, the following vulnerability has been resolved: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access Cast &data to char in order to avoid unintentionally accessing the stack. Notice that data is of type u32, so any increment to &data will be in the order of 4-byte...

7.1CVSS5.8AI score0.0023EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2024/02/27 7:04 p.m.•20 views

DEBIAN-CVE-2021-46965

In the Linux kernel, the following vulnerability has been resolved: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access Cast &data to char in order to avoid unintentionally accessing the stack. Notice that data is of type u32, so any increment to &data will be in the order of 4-byte...

7.1CVSS6.1AI score0.0023EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/27 7:04 p.m.•50 views

CVE-2021-46965

In the Linux kernel, the following vulnerability has been resolved: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access Cast &data to char in order to avoid unintentionally accessing the stack. Notice that data is of type u32, so any increment to &data will be in the order of 4-byte...

7.1CVSS6.3AI score0.0023EPSS
SaveExploits0References4
Rows per page
Query Builder