CVE-2022-42795

CVE-2022-42795 describes a memory consumption vulnerability tied to processing a malicious image that could lead to arbitrary code execution. The issue affects Apple platforms (tvOS 16, iOS 16, macOS Ventura 13, watchOS 9) and is mitigated by memory handling improvements in the respective updates...

PT-2022-24185 · Axiomatic · Axiomatic Bento4

Name of the Vulnerable Software and Affected Versions: Axiomatic Bento4 affected versions not specified Description: A problematic issue was found in Axiomatic Bento4, affecting some unknown functionality of the component. This issue leads to resource consumption and can be exploited remotely...

CVE-2022-42795

A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2022-3807 Axiomatic Bento4 Incomplete Fix CVE-2019-13238 resource consumption

A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Incomplete Fix CVE-2019-13238. The manipulation leads to resource consumption. The attack may be launched remotely. The exploit has been disclosed...

CVE-2022-3807

CVE-2022-3807 affects Axiomatic Bento4 and is linked to an incomplete fix of CVE-2019-13238. The vulnerability concerns a feature/path in Bento4 that can lead to resource consumption (potential memory/resource exhaustion) and is exploitable remotely; exploitation has been disclosed publicly. Seve...

CVE-2022-33859 Unrestricted file upload in Eaton Foreseer EPMS

A security vulnerability was discovered in the Eaton Foreseer EPMS software. Foreseer EPMS connects an operation’s vast array of devices to assist in the reduction of energy consumption and avoid unplanned downtime caused by the failures of critical systems. A threat actor may upload arbitrary...

Nextcloud Server < 23.0.10, < 24.0.6 Uncontrolled Resource Consumption Vulnerability (GHSA-wxx7-w5p4-7x4c)

Nextcloud Server is prone to an uncontrolled resource consumption vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Citrix ADC and Citrix Gateway Multiple Vulnerabilities (CTX319135)

The remote Citrix ADC or Citrix Gateway device is version 11.1 before 11.1-65.22, 12.1 before 12.1-62.27 or 13.0 before 13.0-82.45. It is therefore affected by multiple vulnerabilities: - A vulnerability has been discovered in Citrix ADC formerly known as NetScaler ADC and Citrix Gateway formerly...

PT-2022-7121

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A flaw was found in GLib where GVariant deserialization is vulnerable to a slowdown issue. A crafted GVariant can cause excessive processing, leading to denial of service. The issue is related t...

Use After Free

libexpat.so is vulnerable to use-after-free. The vulnerability exists due to a lack of entity value validations in the XMLParserFree parameter of the parserCreate function in xmlparse.c. An attacker could exploit it to lead to memory consumption resulting in an application crash...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service. The vulnerability exists due to a excessive memory consumption in the gfisommetarestoreitemsref function of meta.c which causes a segmentation fault, allowing an attacker to crash the application...

SUSE: Security Advisory (SUSE-SU-2022:3669-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:3669-1 Security update for go1.19

This update for go1.19 fixes the following issues: Updated to version 1.19.2 bsc1200441: - CVE-2022-41715: Fixed memory exhaustion in regexp/syntax bsc1204023. - CVE-2022-2879: Fixed unbounded memory consumption when reading headers in archive/tar bsc1204024. - CVE-2022-2880: Fixed ReverseProxy...

SUSE-SU-2022:3668-1 Security update for go1.18

This update for go1.18 fixes the following issues: Updated to version 1.18.7 bsc1193742: - CVE-2022-41715: Fixed memory exhaustion in regexp/syntax bsc1204023. - CVE-2022-2879: Fixed unbounded memory consumption when reading headers in archive/tar bsc1204024. - CVE-2022-2880: Fixed ReverseProxy...

CVE-2022-25897

A flaw was found in the Eclipse Milo SDK Server. This flaw allows an attacker to consume the application memory, leading to a denial of service by sending specific requests...

Mageia: Security Advisory (MGASA-2022-0377)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated golang packages fix security vulnerability

regexp/syntax: limit memory used by parsing regexps CVE-2022-41715 archive/tar: unbounded memory consumption when reading headers CVE-2022-2879 net/http/httputil: ReverseProxy should not forward unparseable query parameters CVE-2022-2880...

MGASA-2022-0377 Updated golang packages fix security vulnerability

regexp/syntax: limit memory used by parsing regexps CVE-2022-41715 archive/tar: unbounded memory consumption when reading headers CVE-2022-2879 net/http/httputil: ReverseProxy should not forward unparseable query parameters CVE-2022-2880...

PT-2022-6864

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u341, 8u345-perf, 11.0.16.1 Oracle GraalVM Enterprise Edition versions 20.3.7, 21.3.3, 22.2.0 Description The issue is related to an uncontrolled consumption of resources in the Security component of Oracle Java SE and...

GO-2022-1052 Uncontrolled resource consumption during consensus in github.com/tendermint/tendermint

Mishandling of timestamps during consensus process can cause a denial of service. While reaching consensus, different tendermint nodes can observe a different timestamp for a consensus evidence. This mismatch can cause the evidence to be invalid, upon which the node producing the evidence will be...