Moderate: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API

An array-bounds overflow vulnerability was discovered in SQLite. The vulnerability occurs when handling an overly large input passed as a string argument to some of the C-language APIs provided by SQLite. This flaw allows a remote attacker to pass specially crafted large input to the application...

dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type

A vulnerability found in D-bus. This flaw allows an authenticated attacker to cause dbus-daemon and other programs that use libdbus to crash when receiving a message whose array length is inconsistent with the size of the element type...

sqlite security update

An update is available for sqlite. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list SQLite is a C library that implements an SQL database engine. A large subset o...

RLSA-2023:0339 Moderate: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

Moderate: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

ALSA-2023:0339 Moderate: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

The getMaxTreeBrackets function does not handle the case when the suffixes array cannot be created due to memory constraints.

Lines of code Vulnerability details Impact if MaxTreeHeight is set to a very large value, such as 10^9, and twoSubstringLength is also set to a large value, such as 100, then the suffixes array would require 10^9 100 bytes of memory to be created. If the contract does not have that much memory...

No check to ensure that the orderParameters consideration array is not empty

Lines of code Vulnerability details Impact In the assertConsiderationLengthAndGetOrderHash function, there is no check to ensure that the orderParameters consideration array is not empty. This could result in an out of bounds array access error when trying to retrieve the length of the...

Amazon Linux 2 : sqlite (ALAS-2023-1911)

The version of sqlite installed on the remote host is prior to 3.7.17-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-1911 advisory. SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string...

Vulnerability of the PM_io parser function: <PMDEC>::read_hedge() -> set_vertex(). This component is located in the Nef_2/PM_io parser.h file, which belongs to the CGAL algorithm library. It allows an attacker to access confidential data, compromise its integrity, and also cause service failures.

The vulnerability of the PMioparser function in the Nef2/PMio parser component’s Nef2/PMio parser.h library, which belongs to the Computational Geometry Algorithms library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential...

PT-2025-13356

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow issue was detected in the Linux kernel, specifically in the bnxt module, where test names were being concatenated beyond the end of the first name. This issue was...

Important: libtasn1

Issue Overview: GNU Libtasn1 before 4.19.0 has an ETYPEOK off-by-one array size check that affects asn1encodesimpleder. CVE-2021-46848 Affected Packages: libtasn1 Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core an...

Important: sqlite

Issue Overview: SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API. CVE-2022-35737 Affected Packages: sqlite Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ...

Chrome JSNativeContextSpecialization::BuildElementAccess Bypass Exploit

Chrome: Copy-on-write check bypass in JSNativeContextSpecialization::BuildElementAccess VULNERABILITY DETAILS Copy-on-write is one of V8's internal optimization features that allows multiple JavaScript objects to share the same element store. This feature is primarily used to optimize creation of...

Vulnerability of SNC_io_parser<EW>::read_facet(): Allows attackers to access confidential data, compromise its integrity, and cause service failures. This vulnerability exists in the SNC_io_parser.h library from the Computational Geometry Algorithms library, which is part of the Nef_S2/SNC_io_parser project.

Vulnerability of SNCio parser ::readfacet:fh-boundaryentryobjects in the component SLoopof from the NefS2/SNCio parser.h library, a computational geometry algorithm library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential...

Vulnerability of the SNC_io parser function <EW>: read_facet(), incident_volume(). Component: Nef_S2/SNC_io parser.h library, algorithm library for computational geometry CGAL. This allows an intruder to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCio parser function ::readfacet and fh-incidentvolume in the NefS2/SNCio parser component’s NefS2/SNCio parser.h file is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...

GSD-2023-1001555 md/raid1: stop mdx_raid1 thread when raid1 array run failed

md/raid1: stop mdxraid1 thread when raid1 array run failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001472 amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()

amdgpu/pm: prevent array underflow in vega20odneditdpmtable This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001330 md/raid1: stop mdx_raid1 thread when raid1 array run failed

md/raid1: stop mdxraid1 thread when raid1 array run failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...