CVE-2022-41891

TensorFlow is an open source platform for machine learning. If tf.rawops.TensorListConcat is given elementshape=, it results segmentation fault which can be used to trigger a denial of service attack. We have patched the issue in GitHub commit fc33f3dc4c14051a83eec6535b608abe1d355fde. The fix wil...

CVE-2022-41898

TensorFlow is an open source platform for machine learning. If SparseFillEmptyRowsGrad is given empty inputs, TensorFlow will crash. We have patched the issue in GitHub commit af4a6a3c8b95022c351edae94560acc61253a1b8. The fix will be included in TensorFlow 2.11. We will also cherrypick this commi...

PT-2022-26129

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1 and earlier TensorFlow versions 2.9.3 and earlier TensorFlow versions 2.8.4 and earlier Description The issue occurs when the SparseFillEmptyRowsGrad function is given empty inputs,...

CVE-2022-41898 `CHECK` fail via inputs in `SparseFillEmptyRowsGrad` in Tensorflow

TensorFlow is an open source platform for machine learning. If SparseFillEmptyRowsGrad is given empty inputs, TensorFlow will crash. We have patched the issue in GitHub commit af4a6a3c8b95022c351edae94560acc61253a1b8. The fix will be included in TensorFlow 2.11. We will also cherrypick this commi...

PT-2022-38091

Уязвимость функций test gen synth cmd и test empty synth event модуля kernel/trace/synth event gen test.c поддержки трассировки ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

suricata:fuzz_mimedecparseline: Segv on unknown address with empty stacktrace

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6521280988053504 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzmimedecparseline Job Type: libfuzzermsansuricata Platform Id: linux Crash Type: Segv on unknown address Crash Address: Cra...

libjpeg-turbo:libjpeg_turbo_fuzzer_dev: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6305392057778176 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: libjpegturbofuzzerdev Job Type: libfuzzerasani386libjpeg-turbo Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xbebebebe Crash State: NULL Sanitizer: addre...

kernel: exec: Force single empty string when argv is empty

In the Linux kernel, the following vulnerability has been resolved: exec: Force single empty string when argv is empty Quoting1 Ariadne Conill: "In several other operating systems, it is a hard requirement that the second argument to execve2 be the name of a program, thus prohibiting a scenario...

glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink

An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...

PT-2025-8192

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the execution of commands with empty argv. The issue is described as forcing a single empty string when argv is empty...

Red Hat Ceph security vulnerabilities

Red Hat Ceph is a Linux petabyte-level distributed file system from Red Hat. The main goal of the system is to be designed as a distributed file system without a single point of failure based on POSIX Portable Operating System Interface, enabling fault-tolerant and seamless replication of data. A...

GHSA-32VJ-V39G-JH23 spring-security-oauth2-client vulnerable to Privilege Escalation

Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client via the browser to the Authorization Server which...

UBUNTU-CVE-2022-31690

Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client via the browser to the Authorization Server which...

Privilege Escalation in spring-security-oauth2-client

Spring Security, versions 5.7 prior to 5.7.5 , and 5.6 prior to 5.6.9 , and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can modify a request initiated by the Client via the browser to the Authorization Server whi...

Security Bulletin: Multiple vulnerabilities in HTTP/2 implementation used by Liberty for Java for IBM Cloud

Summary There are multiple vulnerabilities in the HTTP/2 implementation that is used by WebSphere Application Server Liberty. This affects the servlet-4.0 and servlet-3.1 features. These vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2019-9515 DESCRIPTION: Some HTTP/2...

cosmos-sdk:fuzz_unknownproto: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5724864669679616 Project: cosmos-sdk Fuzzing Engine: libFuzzer Fuzz Target: fuzzunknownproto Job Type: libfuzzerasancosmos-sdk Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

maven:ProjectArtifactMetadataFuzzer: Security exception with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5943580745400320 Project: maven Fuzzing Engine: libFuzzer Fuzz Target: ProjectArtifactMetadataFuzzer Job Type: libfuzzerasanmaven Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer: address ASAN Recommend...

Malicious code in com.meta.xr.sdk.empty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e176fd9c7eeccf86b6d27ce925141cb71fe32a6454ccd43e17ada8bfda1b25f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vim spell_iswordp Heap Buffer Overflow DoS

The vulnerability of the spelliswordp function in the spell.c component of the Vim text editor is related to the lack of checks for empty prewords. Exploiting this vulnerability allows a malicious user to access confidential data, compromise its integrity, and even cause service failures...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists Compute function of convgradinputops.h because the CPU/GPU kernels are not properly handled for empty outbackprop inputs which allows an attacker to cause an application crash by sending malicious inputs...