AZL-26693 CVE-2023-29935 affecting package rust for versions less than 1.72.0-1

llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.countop && "operation was already replaced...

AZL-26393 CVE-2023-29933 affecting package llvm16 for versions less than 16.0.0-4

llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument...

DEBIAN-CVE-2023-29934

llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect...

DEBIAN-CVE-2023-29935

llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.countop && "operation was already replaced...

AZL-26409 CVE-2023-29932 affecting package rust for versions less than 1.72.0-2

llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperandmlir::OpOperand...

UBUNTU-CVE-2023-29934

llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect...

UBUNTU-CVE-2023-29942

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isamlir::LLVM::LLVMVoidType...

UBUNTU-CVE-2023-29935

llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.countop && "operation was already replaced...

CVE-2023-29934

CVE-2023-29934 involves a segmentation fault in the LLVM toolchain (commit 6c01b5c) within mlir::Type::getDialect(). The issue is triggered by LLVM/MLIR processing; CVSS indicates LOCAL access with user interaction and a HIGH availability impact. Affected: llvm-toolchain/LLVM Project components u...

CVE-2023-29932

The CVE-2023-29932 issue stems from LLVM Toolchain (llvm-project commit fdbc55a5) containing a segmentation fault in mlir::IROperandmlir::OpOperand , enabling a local denial-of-service via a crash of vulnerable toolchain components. The advisory data indicates MEDIUM severity (CVSSv3.1: 5.5), loc...

CVE-2023-29941

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOpmlir::sparsetensor::SortOp...

CVE-2023-30216

Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information...

UBUNTU-CVE-2023-1178

An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. File integrity may be compromised when source code or installation packages are pulled from a tag or from a...

UBUNTU-CVE-2023-1204

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A user could use an unverified email as a public email and commit email by sending a specifically...

GitLab 代码注入漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab that stems from the fact that file...

CVE-2023-1204

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A user could use an unverified email as a public email and commit email by sending a specifically...

PT-2023-16819 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 10.1 through 15.10.7 GitLab CE/EE versions 15.11 through 15.11.6 GitLab CE/EE versions 16.0 through 16.0.1 Description: An issue has been discovered in GitLab CE/EE where a user could use an unverified email as a public...

GitLab 12.0 < 15.10.5 / 15.11 < 15.11.1 (CVE-2023-1621)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.5, all versions starting from 15.11 before 15.11.1. A malicious group member may continue to commit to...

AZL-26389 CVE-2023-2235 affecting package kernel for versions less than 5.15.111.1-1

A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perfgroupdetach function did not check the event's siblings' attachstate before calling addeventtogroups, but removeonexec made it possible to call listdelevent...

CVE-2023-2236

A use-after-free vulnerability in the Linux Kernel iouring subsystem can be exploited to achieve local privilege escalation. Both ioinstallfixedfile and its callers call fput in a file in case of an error, causing a reference underflow which leads to a use-after-free vulnerability. We recommend...