9462 matches found
UBUNTU-CVE-2023-23108
In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the function Xasc...
UBUNTU-CVE-2023-23109
In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv...
Input validation
In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv...
PT-2023-18844 · Crasm +1 · Crasm +1
Name of the Vulnerable Software and Affected Versions: crasm versions 1.8-3 Description: The issue arises from invalid input validation in specific files passed to the command line application, leading to a divide by zero fault in the function opdiv. Recommendations: For crasm versions 1.8-3, as ...
CVE-2023-23109
In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv...
CVE-2023-23109
In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv...
PT-2023-18843 · Crasm +1 · Crasm +1
Name of the Vulnerable Software and Affected Versions: crasm versions 1.8-3 Description: The issue arises from invalid input validation in specific files passed to the command line application, leading to a NULL pointer dereference in the function Xasc. Recommendations: For crasm versions 1.8-3, ...
CRASM numerical error vulnerability
CRASM is a portable cross assembler for the 6800, 6801, 6803, 6502, 65C02, and Z80 by Colin Bourassa, Individual Developer. A security vulnerability exists in CRASM version 1.8-3, which stems from invalid input validation, where a specific file crasm passed to a command-line application may cause...
CVE-2023-23108
In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the function Xasc...
[SECURITY] Fedora 37 Update: kde-cli-tools-5.27.1-1.fc37
Provides several KDE and Plasma specific command line tools to allow better interaction with the system...
OESA-2023-1124 curl security update
cURL is a computer software project providing a library libcurl and command-line tool curl for transferring data using various protocols. Security Fixes: A flaw was found in the Curl package, where the HSTS mechanism could fail when multiple transfers are done in parallel, as the HSTS cache file...
git: Fix of 4 CVEs
CVE-2022-41903: fix out-of-bounds write caused by integer overflow - CVE-2021-40330: forbid newlines in host and path - CVE-2022-39260: reject too long command line strings - CVE-2023-23946: prevent git-apply from writing behind newly created symbolic links...
A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on.
...
FreeBSD : freerdp -- clients using the `/video` command line switch might read uninitialized data (dd271de6-b444-11ed-9268-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the dd271de6-b444-11ed-9268-b42e991fc52e advisory. - FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using t...
GHSA-JRWR-5X3P-HVC3 markdown-it-py Denial of Service vulnerability in the command line interface
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...
markdown-it-py Denial of Service vulnerability in the command line interface
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...
CVE-2023-26302
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...
PYSEC-2023-23
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...