Fedora: Security Advisory for rust-uu_basenc (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer: Crash in av_channel_layout_uninit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5733527483121664 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACLATMfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000044b...

speex:speex_decode_fuzzer_float: Use-of-uninitialized-value in compute_rms16

Project: https://gitlab.xiph.org/xiph/speex.git Detailed Report: https://oss-fuzz.com/testcase?key=5208337070227456 Project: speex Fuzzing Engine: libFuzzer Fuzz Target: speexdecodefuzzerfloat Job Type: libfuzzermsanspeex Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

[SECURITY] Fedora 39 Update: rust-uu_basenc-0.0.23-3.fc39

Basenc uutils decode/encode input...

PT-2024-40213 · Unknown +1 · Form Framework +1

Name of the Vulnerable Software and Affected Versions: Form Framework system extension form affected versions not specified Description: The issue concerns Insecure Deserialization in the Form Framework when used with the PHP PECL package yaml. This package can unserialize YAML contents to PHP...

speex:speex_decode_fuzzer_fixed: Use-of-uninitialized-value in compute_rms16

Project: https://gitlab.xiph.org/xiph/speex.git Detailed Report: https://oss-fuzz.com/testcase?key=4963492514824192 Project: speex Fuzzing Engine: libFuzzer Fuzz Target: speexdecodefuzzerfixed Job Type: libfuzzermsanspeex Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

[SECURITY] Fedora 40 Update: rust-uu_base32-0.0.23-3.fc40

Base32 uutils decode/encode input base32-encoding...

Authentication Bypass

firebase/php-jwt is vulnerable to Authentication Bypass. The vulnerability is due to missing algorithm checks when calling the decode method allowing attackers bypass verification when using asymmetric keys RS256, RS384, RS512, ES256, ES384, ES512 when there is no algorithm specified within the...

DEBIAN-CVE-2024-32620

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Faddrdecodelen in H5Fint.c, resulting in the corruption of the instruction pointer...

AZL-40598 CVE-2024-32620 affecting package hdf5 for versions less than 1.14.4.3-1

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5Faddrdecodelen in H5Fint.c, resulting in the corruption of the instruction pointer...

DEBIAN-CVE-2024-29166

HDF5 through 1.14.3 contains a buffer overflow in H5Olinfodecode, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

AZL-40603 CVE-2024-29164 affecting package hdf5 for versions less than 1.14.4.3-1

HDF5 through 1.14.3 contains a stack buffer overflow in H5Rdecodeheap, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

AZL-40744 CVE-2024-29164 affecting package hdf5 for versions less than 1.14.4-1

HDF5 through 1.14.3 contains a stack buffer overflow in H5Rdecodeheap, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

UBUNTU-CVE-2024-29164

HDF5 through 1.14.3 contains a stack buffer overflow in H5Rdecodeheap, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F_addr_decode_len in H5Fint.c resulting in the corruption of the instruction pointer.

...

HDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.

...

HDF Group HDF5 安全漏洞

HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5 version 1.14.3 and pri...

HDF Group HDF5 安全漏洞

HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5 version 1.14.3 and pri...

libultrahdr:ultrahdr_dec_fuzzer: Heap-buffer-overflow in ultrahdr::gain_map_metadata::decodeGainmapMetadata

Project: https://github.com/google/libultrahdr.git Detailed Report: https://oss-fuzz.com/testcase?key=5624388803166208 Project: libultrahdr Fuzzing Engine: honggfuzz Fuzz Target: ultrahdrdecfuzzer Job Type: honggfuzzasanlibultrahdr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

RHEL 6 : decode-uri-component (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - decode-uri-component: improper input validation resulting in DoS CVE-2022-38900 Note that Nessus has not tested for...