CVE-2020-27802

An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27802

CVE-2020-27802 affects UPX 4.0.0 and is triggered by processing a crafted Mach-O file, causing a floating point exception in the elf_lookup function (p_lx_elf.cpp). The connected sources confirm the vulnerable component and the root cause (unhandled input in elf_lookup for Mach-O files). No expli...

CVE-2020-27802

An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2021-33844

CVE-2021-33844 is a SoX vulnerability: a floating point divide-by-zero in wav.c:startread() can crash an application when processing a crafted WAV file. The connected advisories confirm this issue across multiple distributions and note vulnerable SoX versions. In Amazon Linux 2, the fix is delive...

CVE-2021-33844

A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted wav file, could cause an application to crash...

apache-commons-jxpath:JXPathFuzzer: Security exception in java.base/java.lang.StringBuffer.append

Detailed Report: https://oss-fuzz.com/testcase?key=5621621733326848 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

UPX 数字错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which stems from an attacker being able to cause a floating-point exception in the elflookup function of its plxelf.cpp component via a carefully crafted Mach-O file...

CVE-2020-27802: Improper Restriction of Operations within the Bounds of a Memory Buffer

An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

SoX 数字错误漏洞

SoX is a set of open source audio processing tools. The product supports playing, converting and recording audio in multiple formats. A security vulnerability exists in SoX, which stems from a floating point exception in the startread function of its wav.c component that causes the application to...

WS-2022-0287

In mruby, there is a floating point exception in udiv...

DEBIAN-CVE-2022-37428

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service daemon crash via a DNS query that leads to an answer with specific properties...

CVE-2022-37428

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service daemon crash via a DNS query that leads to an answer with specific properties...

Input validation

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service daemon crash via a DNS query that leads to an answer with specific properties...

UBUNTU-CVE-2022-37428

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service daemon crash via a DNS query that leads to an answer with specific properties...

powerdns-recursor -- denial of service

PowerDNS Team reports: PowerDNS Security Advisory 2022-02: incomplete exception handling related to protobuf message generation...

OSV-2022-768 Security exception in org.apache.commons.jxpath.ri.axes.UnionContext.setPosition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50506 Crash type: Security exception Crash state: org.apache.commons.jxpath.ri.axes.UnionContext.setPosition org.apache.commons.jxpath.ri.axes.NodeSetContext.nextNode org.apache.commons.jxpath.ri.axes.PredicateContext.nextNode...

The vulnerability in the /net/nfc/netlink.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the /net/nfc/netlink.c component of the Linux operating system is related to an unintercepted exception. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

tomcat:JNDIRealmFuzzer: Security exception in JNDIRealmFuzzer.fuzzerTestOneInput

Project: https://github.com/apache/tomcat.git Detailed Report: https://oss-fuzz.com/testcase?key=4885805218267136 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: JNDIRealmFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.axes.UnionContext.setPosition

Detailed Report: https://oss-fuzz.com/testcase?key=5314042683588608 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2022-764 Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50458 Crash type: Security exception Crash state: org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesize org.apache.commons.jxpath.ri.compiler.CoreOperation.toString...