2120 matches found
kernel: out-of-bounds reads and writes due to enforcing incorrect limits for pointer arithmetic operations by BPF verifier
A flaw was found in kernel/bpf/verifier.c in BPF in the Linux kernel. An incorrect limit is enforced for pointer arithmetic operations which can be abused to perform out-of-bounds reads and writes in kernel memory, leading to local privilege escalation. The highest threat from this vulnerability ...
kernel: protection for sequences of pointer arithmetic operations against speculatively out-of-bounds loads can be bypassed to leak content of kernel memory
A vulnerability was discovered in retrieveptrlimit in kernel/bpf/verifier.c in the Linux kernel mechanism to mitigate speculatively out-of-bounds loads Spectre mitigation. In this flaw a local, special user privileged CAPSYSADMIN BPF program running on affected systems may bypass the protection,...
kernel: out-of-bounds reads and writes due to enforcing incorrect limits for pointer arithmetic operations by BPF verifier
A flaw was found in kernel/bpf/verifier.c in BPF in the Linux kernel. An incorrect limit is enforced for pointer arithmetic operations which can be abused to perform out-of-bounds reads and writes in kernel memory, leading to local privilege escalation. The highest threat from this vulnerability ...
[SECURITY] Fedora 35 Update: python-mpmath-1.2.1-2.fc35
Mpmath is a pure-Python library for multiprecision floating-point arithmetic. It provides an extensive set of transcendental functions, unlimited exponent sizes, complex numbers, interval arithmetic, numerical integration and differentiation, root-finding, linear algebra, and much more. Almost an...
IlmImf Decompression Buffer Overflow DoS
The vulnerability of the decompression function in the Dwa library of the OpenEXR image storage software for images with wide dynamic ranges is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause service interruptions...
libjpeg-turbo Heap Buffer Overflow DoS
The vulnerability of the tjInitDecompress function in the libjpeg-turbo image processing library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information by consuming excessive memory resources...
NewStart CGSL CORE 5.05 / MAIN 5.05 : grub2 Multiple Vulnerabilities (NS-SA-2021-0139)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has grub2 packages installed that are affected by multiple vulnerabilities: - A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process. This flaw...
wolfssl:cryptofuzz-disable-fastmath: Heap-buffer-overflow in mp_mod_2d
Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6035277261438976 Project: wolfssl Fuzzing Engine: honggfuzz Fuzz Target: cryptofuzz-disable-fastmath Job Type: honggfuzzasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash...
Fedora: Security Advisory for python-mpmath (FEDORA-2021-fc30c0de34)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 34 Update: python-mpmath-1.2.1-2.fc34
Mpmath is a pure-Python library for multiprecision floating-point arithmetic. It provides an extensive set of transcendental functions, unlimited exponent sizes, complex numbers, interval arithmetic, numerical integration and differentiation, root-finding, linear algebra, and much more. Almost an...
Apache HTTP Server Pointer Arithmetic DoS
The vulnerability of the Apache HTTP Server is related to pointer arithmetic errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Linux kernel Nitro Enclaves Pointer Arithmetic DoS
The vulnerability of the Linux kernel driver in Nitro Enclaves is related to errors in pointer assignment when closing file descriptors for enclaves. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
Linux kernel mac80211 Pointer Arithmetic DoS
The vulnerability of the syntactic analyzer in the mac80211 subsystem of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure by injecting a 802.11a frame...
IndexPool.mint() Unchecked arithmetic can overflow that allows stealing of almost all the funds in the pool
Handle WatchPug Vulnerability details /// @dev Mints LP tokens - should be called via the router after transferring bento tokens. /// The router must ensure that sufficient LP tokens are minted by using the return value. function mintbytes calldata data public override lock returns uint256...
IndexPool.mint() Unchecked arithmetic can overflow that allows stealing of almost all the funds in the pool
Handle WatchPug Vulnerability details /// @dev Mints LP tokens - should be called via the router after transferring bento tokens. /// The router must ensure that sufficient LP tokens are minted by using the return value. function mintbytes calldata data public override lock returns uint256...
Lrzip Stream Component Heap Buffer Overflow DoS
The vulnerability of the ucompthread function in the stream.c component of the Lrzip compression program is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure through the use of a specially created compressed file...
Lrzip stream.c Heap Buffer Overflow DoS
The vulnerability of the lzodecompressbuf function in the stream.c component of the Lrzip compression program is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created compressed file...
Avahi Pointer Arithmetic DoS
The vulnerability of the avahishostnameresolverstart function in the Avahi service discovery system in local networks is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to cause service failures...
Arithmetic Error - manualRebalance function has multiple arithmetic bugs
Handle tabish Vulnerability details In short there are 2 errors in manualRebalance function : a ratio currentLockRatio has been compared to balance newLockRatio and at another point in the same function subtracted . 1 Expanding on the first one - checking newLockRatio Solution: Instead the if...
Integer overflow
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the atom associated with the “csgp” FOURCC can cause an integer overflow due to unchecked arithmetic...