The vulnerability of Microprogramming Software in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) relates to pointer arithmetic errors, which allow attackers to trigger service failures.

The vulnerability of Microprogramming Software in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to cause service failures...

sp1-recursion-gnark-ffi has insufficient range checks of BabyBear arithmetic

The Gnark recursion circuit constrains arithmetic over BabyBear when the native field of the ZKP circuit is the BN254 scalar field. Proper implementation of this logic requires range checking Bn254 values to be less than the BabyBear modulus. In versions 1.2.0, functions like InvF and InvE used...

GHSA-F77Q-R5QM-W4M8 sp1-recursion-gnark-ffi has insufficient range checks of BabyBear arithmetic

The Gnark recursion circuit constrains arithmetic over BabyBear when the native field of the ZKP circuit is the BN254 scalar field. Proper implementation of this logic requires range checking Bn254 values to be less than the BabyBear modulus. In versions 1.2.0, functions like InvF and InvE used...

The vulnerability of the Windows operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the Windows operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

VulnCheck KEV: CVE-2023-4320

An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity...

SUSE: Security Advisory (SUSE-SU-2024:3524-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: frr / frr-devel / libfrr0 / libfrr_pb0 / libfrrcares0 / etc (SUSE-SU-2024:3524-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3524-1 advisory. This update for frr fixes the following issue: - Arithmetic overflow when parsing attribute of update packet due to regression introduced by...

openSUSE: Security Advisory for frr (SUSE-SU-2024:3524-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for frr

This update for frr fixes the following issue: Arithmetic overflow when parsing attribute of update packet due to regression introduced by the fix for CVE-2017-15865. bsc1230866 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

SUSE-SU-2024:3524-1 Security update for frr

This update for frr fixes the following issue: - Arithmetic overflow when parsing attribute of update packet due to regression introduced by the fix for CVE-2017-15865. bsc1230866...

The vulnerability of the block_dirty_buffer component in the NILFS file system of Linux operating systems allows a attacker to trigger a service failure.

The vulnerability of the blockdirtybuffer component in the NILFS file system of Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: crypto: bcm - Fix pointer arithmetic

In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2dumpomd value of ptr is increased by ciphkeylen instead of hashivlen which could lead to going beyond the buffer boundaries. Fix this bug by changing ciphkeylen to hashivlen. Found by...

The vulnerability of the image_load_jpeg() function in the image.cxx component of the HTMLDOC document conversion tool involves pointer arithmetic errors. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the imageloadjpeg function in the image.cxx component of the HTMLDOC conversion tool is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

mruby:mruby_fuzzer: Segv on unknown address in mrb_bint_reduce

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5825967505866752 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

The vulnerability of the H5T__complete_copy() function in the H5T.c file of the HDF5 library allows a hacker to induce a service failure.

The vulnerability of the H5Tcompletecopy function in the H5T.c file of the HDF5 library is related to the invocation of an arithmetic exception. Exploiting this vulnerability may allow a malicious actor to cause service failure remotely...

The vulnerability of the drivers/clk/mediatek/clk-mt7629.c component of the Linux operating system’s kernel, related to pointer arithmetic errors, allows attackers to cause a service failure.

The vulnerability of the drivers/clk/mediatek/clk-mt7629.c component of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a system failure...

The vulnerability of the ALSA component of the Linux operating system’s kernel, related to pointer arithmetic errors, allows attackers to trigger a service failure.

The vulnerability of the ALSA component in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the DRM/amdgpu cores in the Linux operating system, related to pointer swapping errors, allows a violator to trigger a service failure.

The vulnerability of the DRM/amdgpu cores in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to pointer arithmetic errors, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drivers/gpu/drm/bridge/ite-it66121.c kernel component in the Linux operating system, related to pointer arithmetic errors, allows an attacker to cause a service failure.

The vulnerability of the driver/gpu/drm/bridge/ite-it66121.c kernel component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause a service failure...