PT-2022-30550

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to an underflow in the nfssvc decode writeargs function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-30200

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to an underflow in the nfssvc decode writeargs function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-29689

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to the cdnsp decode trb function, which does not properly handle return values. This could potentially lead to security vulnerabilities, although the actual impact and...

PT-2022-29771

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to an unneeded check in the decode devicenotify args function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-30722

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to a potential underflow in the nfssvc decode writeargs function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29897

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to an underflow in the nfssvc decode writeargs function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-30412

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to a potential underflow in the nfssvc decode writeargs function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the stbijpegdecodeblockprogdc function. Remediation There is no fixed version for stb. References - GitHub Issue - GitHub PR Credit: Pietro Borrello...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free via the stbijpeghuffdecode function. Remediation There is no fixed version for stb. References - GitHub Issue - GitHub PR Credit: Pietro Borrello...

CVE-2022-28042

stbimage.h v2.27 was discovered to contain an heap-based use-after-free via the function stbijpeghuffdecode...

CVE-2022-28041

stbimage.h v2.27 was discovered to contain an integer overflow via the function stbijpegdecodeblockprogdc. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

CVE-2022-28048

STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...

DEBIAN-CVE-2022-28041

stbimage.h v2.27 was discovered to contain an integer overflow via the function stbijpegdecodeblockprogdc. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

DEBIAN-CVE-2022-28048

STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...

UBUNTU-CVE-2022-28041

stbimage.h v2.27 was discovered to contain an integer overflow via the function stbijpegdecodeblockprogdc. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

UBUNTU-CVE-2022-28042

stbimage.h v2.27 was discovered to contain an heap-based use-after-free via the function stbijpeghuffdecode...

UBUNTU-CVE-2022-28048

STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...

opensc:fuzz_pkcs15_decode: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=5957669044748288 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15decode Job Type: libfuzzerubsanopensc Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace Sanitizer:...

stb 资源管理错误漏洞

stb is a single-file public domain library for C/C ++. A security vulnerability exists in nothings stb version 2.27, which stems from a heap-based post-release reuse issue in the function stbijpeghuffdecode in the file stbimage.h. The vulnerability is caused by a heap-based post-release reuse iss...

stb 安全漏洞

stb is a single-file public domain library for C/C ++. A security vulnerability exists in stb version v2.27, which stems from the inclusion of an integer shift of invalid size in the component stbijpegdecodeblockprogac...