ADMesh stl_fix_normal_directions improper array index validation vulnerability

Talos Vulnerability Report TALOS-2022-1594 ADMesh stlfixnormaldirections improper array index validation vulnerability April 3, 2023 CVE Number CVE-2022-38072 SUMMARY An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a10...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : glibc (SUSE-SU-2023:1718-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1718-1 advisory. - DISPUTED A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This...

OESA-2023-1186 libfastjson security update

libfastjson is a fork from json-c, and is currently under development. The aim of this is not to provide a slightly modified clone of json-c. It's aim is to provide: a small library with essential json handling functions, sufficiently good json support not 100% standards compliant, be very fast i...

c-ares: buffer overflow in config_sortlist() due to missing string length check

A flaw was found in the c-ares package. The aressetsortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity...

OSV-2023-251 Stack-buffer-overflow in ext11_work_out_bundles

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57494 Crash type: Stack-buffer-overflow WRITE 4 Crash state: ext11workoutbundles dissectorancsection dissectoran...

[SECURITY] Fedora 38 Update: cutter-re-2.2.0-1.fc38

Cutter is a Qt and C++ GUI for Rizin. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. Cutter is created by reverse engineers for reverse engineers...

Fedora: Security Advisory for cutter-re (FEDORA-2023-af305bed3d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2022-44369

NASM 2.16 development is vulnerable to 476: Null Pointer Dereference via output/outaout.c...

UBUNTU-CVE-2022-44369

NASM 2.16 development is vulnerable to 476: Null Pointer Dereference via output/outaout.c...

CVE-2022-37013

Summary: CVE-2022-37013 affects Unified Automation OPC UA C++ Demo Server 1.7.6-537 (with vendor rollup). The root cause is in certificate handling, where a crafted certificate can force the server into an infinite loop, enabling a remote, unauthenticated denial‑of‑service. Documented by ZDI as t...

NASM 代码问题漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in NASM v2.16, which stems from a null pointer dereference issue in output/outaout.c. The vulnerability is caused by a null pointer dereference issue...

Unified Automation OPC UA C++Demo Server 安全漏洞

Unified Automation OPC UA C++Demo Server is a machine-to-machine communication protocol application for industrial automation from Unified Automation. A security vulnerability exists in Unified Automation OPC UA C++ Demo Server version 1.7.6-537, which stems from a crafted OPC UA message that can...

MongoDB 安全漏洞

MongoDB is a document-oriented database management system from the American company MongoDB. A security vulnerability exists in MongoDB that stems from a potential infinite loop in C-Driver when validating certain BSON input data...

Unified Automation OPC UA C++ Demo Server 安全漏洞

Unified Automation OPC UA C++Demo Server is a machine-to-machine communication protocol application for industrial automation from Unified Automation. A security vulnerability exists in Unified Automation OPC UA C++ Demo Server version 1.7.6-537, which stems from a crafted certificate that can...

The vulnerability of the rate_init function in the rate.c component of the Sound eXchange audio editor allows a hacker to cause a service failure.

The vulnerability of the rateinit function in the rate.c component of the Sound eXchange audio editor is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failure...

Mageia: Security Advisory (MGASA-2023-0095)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2023-0048)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0486-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-22608

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2023-28638

CVE-2023-28638 affects Snappier 1.1.0, a C# port of Google’s Snappy. The issue is a buffer overrun stemming from byte references briefly pointing outside buffer bounds during .NET GC compaction, which can invalidate buffer range checks and lead to a denial of service through a potential memory ac...