4786 matches found
[SECURITY] Fedora 35 Update: golang-github-snappy-0.0.2-6.fc35
Implementation of the Snappy compression format for Go...
[SECURITY] Fedora 35 Update: golang-github-pierrec-lz4-4.1.3-5.fc35
Package lz4 implements reading and writing lz4 compressed data a frame, as specified in http://fastcompression.blogspot.com/2013/04/lz4-streaming-format-final.html. This package is compatible with the LZ4 frame format although the block level compression and decompression functions are exposed an...
[SECURITY] Fedora 36 Update: go-bindata-3.0.7-22.gita0ff256.fc36
A small utility which generates Go code from any file This tool converts any file into managable Go source code. Useful for embedding binary data into a go program. The file data is optionally gzip compressed before being converted to a raw byte slice...
CVE-2022-22040
Internet Information Services Dynamic Compression Module Denial of Service Vulnerability...
CVE-2022-22040
Internet Information Services Dynamic Compression Module Denial of Service Vulnerability...
CVE-2022-22040
Internet Information Services Dynamic Compression Module Denial of Service Vulnerability...
Denial of service
Internet Information Services Dynamic Compression Module Denial of Service Vulnerability...
CVE-2022-22040
Technical details about CVE-2022-22040 are not publicly provided in the supplied documents. Monitor for updates from official sources for affected products, impact specifics, and fixes before taking action.
CVE-2022-22040 Internet Information Services Dynamic Compression Module Denial of Service Vulnerability
...
Internet Information Services Dynamic Compression Module Denial of Service Vulnerability
...
PT-2022-4638
Name of the Vulnerable Software and Affected Versions compress/gzip versions prior to 1.17.12 compress/gzip versions prior to 1.18.4 Description The issue is related to uncontrolled recursion in the Reader.Read function of the compress/gzip package in the Go programming language. This can be...
KLA12581 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of...
CVE-2022-22040: Undefined Security Weakness
Internet Information Services Dynamic Compression Module Denial of Service Vulnerability...
CLSA-2022-1657561632 Fixed CVEs in openssh-5.3p1: CVE-2016-10708, CVE-2016-10012
CVE-2016-10708: fix crash in packet handling code by moving inbound NEWKEYS handling to kex layer - CVE-2016-10012: abandon the fix due to compression mode issues...
Fixed CVEs in openssh-5.3p1: CVE-2016-10708, CVE-2016-10012
CVE-2016-10708: fix crash in packet handling code by moving inbound NEWKEYS handling to kex layer - CVE-2016-10012: abandon the fix due to compression mode issues...
CLSA-2022-1657560108 Fixed CVEs in openssh: CVE-2016-10708, CVE-2016-10012
CVE-2016-10708: fix crash in packet handling code by moving inbound NEWKEYS handling to kex layer - CVE-2016-10012: abandon the fix due to compression mode issues...
OSV-2022-571 Use-of-uninitialized-value in LZ4_compress_fast_extState_fastReset
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48993 Crash type: Use-of-uninitialized-value Crash state: LZ4compressfastextStatefastReset LZ4FcompressBlock LZ4FcompressUpdateImpl...
lz4:round_trip_frame_uncompressed_fuzzer: Use-of-uninitialized-value in LZ4_compress_fast_extState_fastReset
Project: https://github.com/lz4/lz4.git Detailed Report: https://oss-fuzz.com/testcase?key=5810591549227008 Project: lz4 Fuzzing Engine: libFuzzer Fuzz Target: roundtripframeuncompressedfuzzer Job Type: libfuzzermsanlz4 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...
lz4:round_trip_frame_uncompressed_fuzzer: Use-of-uninitialized-value in LZ4HC_compress_generic_noDictCtx
Project: https://github.com/lz4/lz4.git Detailed Report: https://oss-fuzz.com/testcase?key=6235198659887104 Project: lz4 Fuzzing Engine: libFuzzer Fuzz Target: roundtripframeuncompressedfuzzer Job Type: libfuzzermsanlz4 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...
EulerOS 2.0 SP9 : zstd (EulerOS-SA-2022-2017)
According to the versions of the zstd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A race condition in the one-pass compression functions of Zstandard prior to version 1.3.8 could allow an attacker to write bytes out of bounds if ...