14979 matches found
Debian DSA-5524-1 : libcue - security update
The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5524 advisory. - libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME...
Lack of array length validation in delegateMulti() can lead to errors.
Lines of code Vulnerability details Impact There is no validation that the sources, targets, and amounts arrays passed to delegateMulti are the same length. This could cause issues with iterating through the arrays. Proof of Concept In the delegateMulti function. function delegateMulti uint256...
Fedora 38 : tracker-miners (2023-e8f45c67f5)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-e8f45c67f5 advisory. Seccomp jail improvements CVE-2023-43641 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2023:4035-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4035-1 advisory. The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were...
GLSA-202310-10 : libcue: Arbitrary Code Execution
The remote host is affected by the vulnerability described in GLSA-202310-10 libcue: Arbitrary Code Execution - libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment ca...
Slackware Linux 15.0 / current libcue Vulnerability (SSA:2023-283-01)
The version of libcue installed on the remote host is prior to 2.2.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-283-01 advisory. - libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds arr...
ALPINE-CVE-2023-43641
libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it ...
CVE-2023-43641
libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it ...
libcue -- out-of-bounds array access
The libcue team reports: There is a vulnerability to out-of-bounds array access...
Hewlett Packard Enterprise MSA Controller Environment Issue Vulnerability
The Hewlett Packard Enterprise MSA Controller HPE MSA Controller is a series of controllers from Hewlett Packard Enterprise USA. A security vulnerability exists in versions prior to Hewlett Packard Enterprise MSA Controller IN210R004, which stems from a vulnerability that allows an attacker to...
Existing pools will be bricked due to uninitialized state
Lines of code Vulnerability details Existing pools will be bricked due to uninitialized Summary Pools already present in the exchange will be bricked when crossTicks is called with an uninitialized tickTracking storage, which will trigger an array out of bounds error. Impact New pools in the...
njs:njs_process_script_fuzzer: Segv on unknown address in njs_chb_append0
Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=4938686485364736 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: njschbappen...
HPESBST04539 rev.1 - HPE MSA Controllers, Remote Desync Vulnerability
Potential Security Impact: Remote: Input Validation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE MSA 2062 Storage - Prior to IN210R004 HPE MSA 2060 Storage - Prior to IN210R004 HPE MSA 1060 Storage - Prior to IN210R004 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- |...
PT-2023-9767
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an array-index-out-of-bounds error in the diAlloc function of the jfs component. This error occurs due to the lack of a check against the agno of the iag while...
Gas Limit Issues/DoS with Block Gas Limit
Lines of code Vulnerability details Impact Detailed description of the impact of this finding. Iterating through the users array without a limitation might cause the function to consume a lot of gas, especially when the array size is large. It may potentially reach the block gas limit and get...
PT-2024-14755
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an array-index-out-of-bounds error in the dbFindLeaf function when searching for dmtree t for sufficient free blocks. This error occurs while getting an element i...
Lack of Input Validation
Lines of code Vulnerability details Impact Neither function appears to validate the length of the users array, which opens the door for misuse or unexpected behavior. Proof of Concept A user can pass an empty array or an exceedingly large array to disrupt expected behavior. Tools Used Manual code...
Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6415-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6415-1 advisory. Daniel Trujillo, Johannes Wikner, and Kaveh Razavi discovered that some AMD processors utilising speculative execution and branch prediction may allow...
