Xen: A transaction conflict can crash C Xenstored (XSA-440)

When a transaction is committed, C Xenstored will first check the quota is correct before attempting to commit any nodes. It would be possible that accounting is temporarily negative if a node has been removed outside of the transaction. Unfortunately, some versions of C Xenstored are assuming th...

PT-2023-5953 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform affected versions not specified Description: The issue is related to a transient Denial of Service DOS in the modem when triggering a camping on a 5G cell. It is also associated with a software vulnerability in...

BIND DNS DoT DoS

The vulnerability of the DoT protocol DNS over TLS implementation in BIND DNS servers lies in the insufficient use of the assert function or similar operators when processing requests. Exploiting this vulnerability allows a malicious actor to cause service failures...

Poppler PDF Rendering Heap Buffer Overflow DoS

The vulnerability of the Object::getString component in the Poppler PDF rendering library is related to the insufficient use of the assert function. Exploiting this vulnerability may allow an attacker to cause a service failure...

Poppler PDF Rendering Library Heap Buffer Overflow DoS

The vulnerability of the PDFDoc::replacePageDict function in the Poppler PDF rendering library is related to the insufficient use of the assert function. Exploiting this vulnerability could allow an attacker to cause service failures...

MariaDB item_cmpfunc.h Segmentation Fault

The vulnerability of the itemcmpfunc.h component in the MariaDB database management system is related to the insufficient use of the assert function. Exploiting this vulnerability could allow an attacker to cause service failures...

Fast DDS Use-After-Free

The vulnerability of the Fast DDS library lies in the use of the assert function or similar operators. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Fast DDS Heap Buffer Overflow DoS

The vulnerability of the Fast DDS library lies in the use of the assert function or similar operators. Exploiting this vulnerability could allow an attacker to cause a service failure...

Google gRPC Remote Procedure Call DoS

The vulnerability of the Google gRPC process callouts is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

Demon Routing Protocol Daemon Juniper Networks Junos OS DoS

The vulnerability of the Demon Routing Protocol Daemon rpd in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow attackers to cause service interruptions...

ASB-A-275041864

In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2054)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Network Routing Heap Buffer Overflow DoS

The vulnerability of the peekforas4capability function in the software for implementing network routing on Unix-like systems is related to deficiencies in the use of the assert function. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

SIXEL Libsixel Encoder/Decoder Heap Buffer Overflow DoS

The vulnerability of the stbimage.h component in the SIXEL Libsixel encoder/decoder library for C/C++ Libstb is related to the insufficient use of the assert function. Exploiting this vulnerability allows a malicious actor to cause service failures...

DNS BIND DoS

The vulnerability of the BIND DNS server relates to the processing of the Write Directive DS. BIND waits for this processing to complete, or until the timeout interval expires. As a result, the resumedslookup function is called, but it does not check whether the previous selection has been...

ROS-20230420-02

A vulnerability in the iconv function of the glibc library is related to a flaw in the use of the assert function. The vulnerability allows an attacker acting remotely to cause a denial of service...

sps.cc Component Libde265 Data Compromise

The vulnerability of the sps.cc component in the h.265 video codec implementation by Libde265 is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and even cause service failures...

Sound eXchange rate_init Heap Buffer Overflow DoS

The vulnerability of the rateinit function in the rate.c component of the Sound eXchange audio editor is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failure...

Code injection

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

CVE-2023-23009

CVE-2023-23009 affects Libreswan 4.9, enabling remote DoS via a crafted TS payload with an incorrect selector length, causing an assert failure and daemon restart. Connected advisories confirm multiple distributions (e.g., MiracleLinux, TencentOS Server, RHEL/CentOS/Oracle Linux families) referen...