1856 matches found
CVE-2022-43283
wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write...
CVE-2022-43283
wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write...
CVE-2022-43408
Jenkins Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of 'input' steps when using it to generate URLs to proceed or abort Pipeline builds, allowing attackers able to configure Pipelines to specify 'input' step IDs resulting in URLs that would bypass the CSRF...
Code injection
In ISC DHCP 4.4.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addoption, it increases the option's refcount field. However, there is not a corresponding call to optiondereference to decrement the refcount field. The function addoption is on...
CVE-2022-2928
CVE-2022-2928 affects ISC DHCP (versions including 4.4.0–4.4.3 and 4.1-ESV-R1–4.1-ESV-R16-P1). Root cause: option_code_hash_lookup() increments an option’s refcount in add_option() without a corresponding option_dereference(), and add_option() is invoked for multiple options in lease query respon...
CVE-2022-2928
In ISC DHCP 4.4.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addoption, it increases the option's refcount field. However, there is not a corresponding call to optiondereference to decrement the refcount field. The function addoption is on...
Debian DSA-5251-1 : isc-dhcp - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5251 advisory. Several vulnerabilities have been discovered in the ISC DHCP client, relay and server. CVE-2022-2928 It was discovered that the DHCP server does not correctly...
CVE-2022-2928
In ISC DHCP 4.4.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addoption, it increases the option's refcount field. However, there is not a corresponding call to optiondereference to decrement the refcount field. The function addoption is on...
UBUNTU-CVE-2022-2928
In ISC DHCP 4.4.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addoption, it increases the option's refcount field. However, there is not a corresponding call to optiondereference to decrement the refcount field. The function addoption is on...
Google TensorFlow 输入验证错误漏洞
Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google Inc. in the United States. Google TensorFlow suffers from an Input Validation Error vulnerability that stems from an overflow that can occur if the limits parameter of the RaggedRangOp function is a...
CVE-2022-38496
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp...
CVE-2022-38496
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp...
PYSEC-2022-43137
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp...
PYSEC-2022-43137
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp...
UBUNTU-CVE-2022-38496
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp...
CVE-2022-38496
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp...
CVE-2022-38496
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp...
CVE-2022-38496
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp...
CVE-2022-38496
CVE-2022-38496: LIEF library issue where commit 365a16a introduces a reachable assertion abort in BinaryStream.hpp. Affects LIEF components using BinaryStream.hpp; impact is crash (assertion abort) locally. No exploit details or patch info provided in the connected documents. Remediation/versions...
LIEF 安全漏洞
LIEF is a cross-platform library from the individual developer Romain Thomas. It is used to parse, modify and abstract Elf, Pe and MachO formats. LIEF suffers from a security vulnerability that stems from an assertion abort reachable in the component BinaryStream.hpp...