Lucene search
+L

7526 matches found

UbuntuCve
UbuntuCve
added 2021/05/27 12:15 a.m.29 views

CVE-2021-30501

An assertion abort was found in upx MemBuffer::alloc in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service abort via a crafted file...

5.5CVSS6.7AI score0.01041EPSS
SaveExploits1References5
CNVD
CNVD
added 2021/05/27 12:00 a.m.28 views

UPX Assertion Abort Vulnerability

UPX is an open source executable file packaging program that supports a variety of file formats from different operating systems. An assertion abort vulnerability exists in MemBuffer::alloc in mem.cpp in UPX version 4.0.0. An attacker can exploit this vulnerability via a specially crafted file to...

5.5CVSS6.5AI score0.01041EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2021/05/27 12:00 a.m.58 views

Oracle Linux 8 : bind (ELSA-2021-1989)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1989 advisory. 32:9.11.26-4 - Possible assertion failure on DNAME processing CVE-2021-25215 Tenable has extracted the preceding description block directly from the Oracle Linu...

7.5CVSS7.3AI score0.11387EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2021/05/26 11:54 p.m.61 views

CVE-2021-30501

An assertion abort was found in upx MemBuffer::alloc in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service abort via a crafted file...

5.5CVSS6AI score0.01041EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2021/05/26 11:54 p.m.100 views

CVE-2021-30501

An assertion abort was found in upx MemBuffer::alloc in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service abort via a crafted file...

5.5CVSS5.3AI score0.01041EPSS
SaveExploits1
Cvelist
Cvelist
added 2021/05/26 11:54 p.m.42 views

CVE-2021-30501

An assertion abort was found in upx MemBuffer::alloc in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service abort via a crafted file...

5.5AI score0.01041EPSS
SaveExploits1References4
Oracle linux
Oracle linux
added 2021/05/25 12:00 a.m.120 views

glibc security, bug fix, and enhancement update

2.28-151.0.1.el84 - merge RH patches for ol8-u4 release Review-exception: Patch merge - Provide glibc.pthread.mutexspincount tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag ...

9.8CVSS0.4AI score0.04731EPSS
SaveExploits2
Veracode
Veracode
added 2021/05/24 12:38 a.m.32 views

Denial Of Service (DoS)

glibc is vulnerable to denial of service. An attacker capable of supplying a malicious sequence of characters to an application using iconv to convert from ISO-2022-JP-3 to cause an assertion failure...

7.5CVSS4.8AI score0.03093EPSS
SaveExploits0References13Affected Software1
CNNVD
CNNVD
added 2021/05/24 12:00 a.m.8 views

OpenLDAP 安全漏洞

OpenLDAP is an open source implementation of the Lightweight Directory Access Protocol LDAP from the OpenLDAP Openldap Foundation in the United States. A security vulnerability exists in OpenLDAP, which can be exploited by an attacker to send a malicious packet to OpenLDAP's slapd server for...

7.5CVSS7.8AI score0.01094EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/05/24 12:00 a.m.53 views

Amazon Linux 2 : bind (ALAS-2021-1635)

The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1635 advisory. A flaw was found in bind. The way DNAME records are processed may trigger the same RRset to the ANSWER section to be added more...

7.5CVSS7.2AI score0.11387EPSS
SaveExploits0References3
Mageia
Mageia
added 2021/05/23 6:45 p.m.65 views

Updated bind packages fix security vulnerabilities

A broken inbound incremental zone update IXFR can cause named to terminate unexpectedlyCVE-2021-25214. Mageia 7 version not affected. An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself CVE-2021-25215. This affects both...

9.8CVSS4.5AI score0.82367EPSS
SaveExploits0References6
OSV
OSV
added 2021/05/23 6:45 p.m.9 views

MGASA-2021-0220 Updated bind packages fix security vulnerabilities

A broken inbound incremental zone update IXFR can cause named to terminate unexpectedlyCVE-2021-25214. Mageia 7 version not affected. An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself CVE-2021-25215. This affects both...

9.8CVSS7.2AI score0.82367EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2021/05/21 2:25 p.m.43 views

CHECK-fail in `tf.raw_ops.IRFFT`

Impact An attacker can cause a denial of service by exploiting a CHECK-failure coming from the implementation of tf.rawops.IRFFT: python import tensorflow as tf values = -10.0 130 values0 = -9.999999999999995 inputs = tf.constantvalues, shape=10, 13, dtype=tf.float32 inputs = tf.castinputs,...

5.5CVSS2.5AI score0.00189EPSS
SaveExploits1References7Affected Software3
Github Security Blog
Github Security Blog
added 2021/05/21 2:21 p.m.40 views

Division by zero in `Conv3D`

Impact A malicious user could trigger a division by 0 in Conv3D implementation: python import tensorflow as tf inputtensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float32 filtertensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float32 tf.rawops.Conv3Dinput=inputtensor, filter=filtertensor,...

5.5CVSS1.1AI score0.00189EPSS
SaveExploits1References7Affected Software3
NVD
NVD
added 2021/05/20 7:15 p.m.15 views

CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.5CVSS0.01423EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/20 7:15 p.m.4 views

DEBIAN-CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.5CVSS7.3AI score0.01423EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/05/20 7:15 p.m.7 views

CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.5CVSS5.2AI score0.01423EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2021/05/20 7:15 p.m.29 views

CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.5CVSS7.1AI score0.01423EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/20 7:15 p.m.8 views

UBUNTU-CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.5CVSS7.1AI score0.01423EPSS
SaveExploits1References3
Prion
Prion
added 2021/05/20 7:15 p.m.21 views

Design/Logic Flaw

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

5CVSS7.4AI score0.01423EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder