2110 matches found
Information Exposure Through Timing Discrepancy
Overview paragonie/ecc is an Elliptic Curve Cryptography library Affected versions of this package are vulnerable to Information Exposure Through Timing Discrepancy due to the use of the GMPMath adapter, which wraps the GNU Multiple Precision arithmetic library GMP not aiming to provide...
GHSA-8724-5XMM-W5XQ CosmWasm affected by arithmetic overflows
Some mathematical operations in cosmwasm-std use wrapping math instead of panicking on overflow for very big numbers. This can lead to wrong calculations in contracts that use these operations. Affected functions: - Uint256,512::pow / Int256,512::pow - Int256,512::neg Affected if overflow-checks ...
CosmWasm affected by arithmetic overflows
Some mathematical operations in cosmwasm-std use wrapping math instead of panicking on overflow for very big numbers. This can lead to wrong calculations in contracts that use these operations. Affected functions: - Uint256,512::pow / Int256,512::pow - Int256,512::neg Affected if overflow-checks ...
Arithmetic overflows in cosmwasm-std
Some mathematical operations in cosmwasm-std use wrapping math instead of panicking on overflow for very big numbers. This can lead to wrong calculations in contracts that use these operations. Affected functions: - Uint256,512::pow / Int256,512::pow - Int256,512::neg Affected if overflow-checks ...
RUSTSEC-2024-0338 Arithmetic overflows in cosmwasm-std
Some mathematical operations in cosmwasm-std use wrapping math instead of panicking on overflow for very big numbers. This can lead to wrong calculations in contracts that use these operations. Affected functions: - Uint256,512::pow / Int256,512::pow - Int256,512::neg Affected if overflow-checks ...
satellite: arithmetic overflow in satellite
An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity...
Important: Red Hat Security Advisory: Satellite 6.15.0 release
An update is now available for Red Hat Satellite 6.15. The release contains a new version of Satellite and important security fixes for various components. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base scor...
USN-6736-1: klibc vulnerabilities
It was discovered that zlib, vendored in klibc, incorrectly handled pointer arithmetic. An attacker could use this issue to cause klibc to crash or to possibly execute arbitrary code. CVE-2016-9840, CVE-2016-9841 Danilo Ramos discovered that zlib, vendored in klibc, incorrectly handled memory whe...
The vulnerability of the Envoy proxy server, related to pointer dereferencing errors, allows a hacker to cause a service failure.
The vulnerability of the Envoy proxy server is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
PT-2024-40907 · Rsa · Rsa
Name of the Vulnerable Software and Affected Versions: rsa affected versions not specified Description: The issue concerns potential side-channel attacks due to non-constant time operations, including arithmetic and Base64 encoding. Recommendations: At the moment, there is no information about a...
CVE-2024-26720
In the Linux kernel, the following vulnerability has been resolved: mm/writeback: fix possible divide-by-zero in wbdirtylimits, again struct dirtythrottlecontrol -thresh is an unsigned long, but is passed as the u32 divisor argument to divu64. On architectures where unsigned long is 64 bytes, the...
PT-2024-27219
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential overflow in the result of the multiplication of two lower precision u32 operands before widening it to higher precision u64 in the drm/xe/xe migrate...
SUSE CVE-2023-45927
S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...
CVE-2023-45927
S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...
CVE-2023-45927
S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...
DEBIAN-CVE-2023-45927
S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...
AZL-37129 CVE-2023-45927 affecting package slang 2.3.3-1
S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...
AZL-37140 CVE-2023-45927 affecting package slang 2.3.2-4
S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function ttsprintf...
