PT-2022-20431 · Artifex +2 · Artifex Mujs +2

Name of the Vulnerable Software and Affected Versions: Artifex MuJS versions prior to 1.2.1 Description: The issue results in stack consumption due to unlimited recursion in the compile function in regexp.c. Recommendations: For versions prior to 1.2.1, update to version 1.2.1 or later to resolve...

CVE-2022-30974

MuJS contains a denial-of-service vulnerability in versions up to 1.2.0 caused by infinite recursion in regexp.c during compilation, leading to stack exhaustion. This is documented across multiple sources (CNVD/CNNVD, Debian DSA, CNVD, Gentoo GLSA) and affects Artifex MuJS embedded in software. N...

Oracle Linux 8 : python38:3.8 / and / python38-devel:3.8 (ELSA-2022-1764)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1764 advisory. - Fix for CVE-2021-3733 and CVE-2021-3737 Resolves: rhbz1995234, rhbz1995162 python3x-pip Tenable has extracted the preceding description block directl...

CVE-2022-30974

compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413...

CVE-2022-30974

compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413...

GitLab 12.10 < 14.8.6 / 14.9 < 14.9.4 / 14.10 < 14.10.1 (CVE-2022-1431)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab...

Oracle Linux 8 : go-toolset:ol8 (ELSA-2022-1819)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1819 advisory. delve 1.7.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.7.2-1 - Rebase to 1.7.2 - Related: rhbz2014088 golang 1.17.7-1 - Rebase...

CVE-2022-30974

compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413...

CVE-2022-30974

compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413...

GitLab 13.9 < 14.8.6 / 14.9 < 14.9.4 / 14.10 < 14.10.1 (CVE-2022-1510)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab w...

CVE-2022-28191

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager nvidia.ko, where uncontrolled resource consumption can be triggered by an unprivileged regular user, which may lead to denial of service...

Design/Logic Flaw

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager nvidia.ko, where uncontrolled resource consumption can be triggered by an unprivileged regular user, which may lead to denial of service...

CVE-2022-28191

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager nvidia.ko, where uncontrolled resource consumption can be triggered by an unprivileged regular user, which may lead to denial of service...

CVE-2022-28191

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager nvidia.ko, where uncontrolled resource consumption can be triggered by an unprivileged regular user, which may lead to denial of service...

CVE-2022-28191

CVE-2022-28191 affects NVIDIA vGPU software, with a vulnerability in the Virtual GPU Manager (nvidia.ko) that can trigger uncontrolled resource consumption by an unprivileged user, leading to denial of service. The connected documents corroborate the issue as a resource-management/DoS vulnerabili...

CVE-2022-28656

isclosingsession allows users to consume RAM in the Apport process...

CVE-2021-38872

IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a denial of service by consuming resources with multiple requests. IBM X-Force ID: 208348...

USN-5427-1: Apport vulnerabilities

Muqing Liu and neoni discovered that Apport incorrectly handled detecting if an executable was replaced after a crash. A local attacker could possibly use this issue to execute arbitrary code as the root user. CVE-2021-3899 Gerrit Venema discovered that Apport incorrectly handled connections to...

USN-5427-1 apport vulnerabilities

Muqing Liu and neoni discovered that Apport incorrectly handled detecting if an executable was replaced after a crash. A local attacker could possibly use this issue to execute arbitrary code as the root user. CVE-2021-3899 Gerrit Venema discovered that Apport incorrectly handled connections to...

Django Image Field Vulnerable to Image Decompression Bombs

The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a denial of service memory consumption by uploading an image file...