7525 matches found
CVE-2023-22290
CVE-2023-22290 describes an uncaught exception in Intel® Unison™ software that may allow an authenticated user to trigger a denial of service over the network. The NVD/Intel entry lists a CVSS v3.1 base score of 6.5 (Network, Low complexity, Low privileges, Availability impact) and notes the vuln...
CVE-2023-22290
Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable denial of service via network access...
kernel: x86/mm: Randomize per-cpu entry area
A possible unauthorized memory access flaw was found in the Linux kernel cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. This issue could allow a local user to gain access to some important data with expected locatio...
kernel: x86/mm: Randomize per-cpu entry area
A possible unauthorized memory access flaw was found in the Linux kernel cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. This issue could allow a local user to gain access to some important data with expected locatio...
OSV-2023-1157 Security exception in org.apache.lucene.util.ArrayUtil.growExact
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64141 Crash type: Security exception Crash state: org.apache.lucene.util.ArrayUtil.growExact org.apache.lucene.util.ArrayUtil.grow org.apache.lucene.util.BytesRefBuilder.grow...
PT-2023-18401 · Intel · Intel Unison
Name of the Vulnerable Software and Affected Versions: Intel Unison affected versions not specified Description: The issue allows an authenticated user to potentially enable denial of service via network access due to an uncaught exception in some Intel Unison software. Recommendations: At the...
PT-2023-35583 · Apache · Apache Lucene
Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: A security exception crash has been reported in Apache Lucene. The crash occurs in the org.apache.lucene.util.ArrayUtil.growExact function, which is called by...
SUSE-SU-2023:4431-1 Security update for apache2
This update for apache2 fixes the following issues: - CVE-2023-31122: Fixed an out of bounds read in modmacro bsc1216424. Non-security fixes: - Fixed the content type handling in modproxyhttp2 bsc1214357. - Fixed a floating point exception crash bsc1207399...
OSV-2023-1152 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64130 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.ByteBuffer.position java.base/sun.nio.cs.UTF8.updatePositions...
PT-2023-35580 · Unknown +1 · Com.Puppycrawl.Tools.Checkstyle +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash has been reported, involving the com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr and...
OSV-2023-1136 Security exception in org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64051 Crash type: Security exception Crash state: org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.readRecordSID...
The vulnerability of the X509_check function in the OpenConnect client allows a hacker to gain access to confidential data.
The vulnerability of the X509check function in the OpenConnect client involves deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...
NewStart CGSL MAIN 6.06 : net-snmp Multiple Vulnerabilities (NS-SA-2023-0133)
The remote NewStart CGSL host, running version MAIN 6.06, has net-snmp packages installed that are affected by multiple vulnerabilities: - handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker w...
OSV-2023-1121 Security exception in org.apache.poi.util.LZWDecompresser.decompress
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63925 Crash type: Security exception Crash state: org.apache.poi.util.LZWDecompresser.decompress org.apache.poi.util.LZWDecompresser.decompress org.apache.poi.hdgf.streams.CompressedStreamStore.decompress...
kernel: x86/mm: Randomize per-cpu entry area
A possible unauthorized memory access flaw was found in the Linux kernel cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. This issue could allow a local user to gain access to some important data with expected locatio...
NULL Pointer Exception bug that can be used by a remote attacker
handleipv6IpForwarding in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. Products Confirmed Not Affected Brocade Fabri...
OSV-2023-1097 Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63766 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst java.base/java.util.stream.ReferencePipeline$3$1.accept...
PT-2023-35550 · Git +1 · Php
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address, which occurs during the execution of certain functions, including cleanup liv...
openSUSE 15 Security Update : sox (openSUSE-SU-2023:0329-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0329-1 advisory. - An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h startread function, there is an integer overflow on the result of integer...
