CVE-2022-38497

LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69...

PYSEC-2022-274

LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc...

PYSEC-2022-277

LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69...

UBUNTU-CVE-2022-38495

LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function printbinary at /c/machoreader.c...

PYSEC-2022-275

LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::fileoffset at /MachO/SegmentCommand.cpp...

PYSEC-2022-276

LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function printbinary at /c/machoreader.c...

CVE-2022-38497

LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69...

CVE-2022-38497

LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69...

CVE-2022-38496

LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp...

CVE-2022-38496

LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp...

CVE-2022-38306

LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc...

PT-2022-24357 · Lief · Lief

Name of the Vulnerable Software and Affected Versions: LIEF version 5d1d643 Description: A segmentation violation was discovered in LIEF via the function LIEF::MachO::SegmentCommand::file offset at /MachO/SegmentCommand.cpp. Recommendations: For LIEF version 5d1d643, update to a version that...

CVE-2022-36096

The XWiki Platform Index UI is an Index of all pages, attachments, orphans and deleted pages and attachments for XWiki Platform, a generic wiki platform. Prior to versions 13.10.6 and 14.3, it's possible to store JavaScript which will be executed by anyone viewing the deleted attachments index wi...

CVE-2022-36073 RubyGems allows creation of users with arbitrary unverified emails

RubyGems.org is the Ruby community gem host. A bug in password & email change confirmation code allowed an attacker to change their RubyGems.org account's email to an unowned email address. Having access to an account whose email has been changed could enable an attacker to save API keys for that...

CVE-2022-36661

xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vipciread. This vulnerability allows attackers to cause a Denial of Service via unspecified vectors...

CVE-2022-36660

xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pcivtrndnotify...

CVE-2022-36661

xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vipciread. This vulnerability allows attackers to cause a Denial of Service via unspecified vectors...

Null pointer dereference

xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vipciread. This vulnerability allows attackers to cause a Denial of Service via unspecified vectors...

CVE-2022-36660

xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pcivtrndnotify...

xhyve code issue vulnerabilities

xhyve is a lightweight OS X virtualization solution open-sourced by machyve. A security vulnerability exists in xhyve commit number:dfbe09b that stems from a null pointer dereference in its vipciwrite component that allows an attacker to cause a denial of service via an unspecified vector...