CVE-2022-35981

TensorFlow is an open source platform for machine learning. FractionalMaxPoolGrad validates its inputs with CHECK failures instead of with returning errors. If it gets incorrectly sized inputs, the CHECK failure can be used to trigger a denial of service attack. We have patched the issue in GitHu...

CVE-2022-35981

TensorFlow is an open source platform for machine learning. "FractionalMaxPoolGrad" validates its inputs with "CHECK" failures instead of with returning errors. If it gets incorrectly sized inputs, the "CHECK" failure can be used to trigger a denial of service attack. We have patched the issue in...

CVE-2022-35952 `CHECK` failures in `UnbatchGradOp` in TensorFlow

TensorFlow is an open source platform for machine learning. The UnbatchGradOp function takes an argument id that is assumed to be a scalar. A nonscalar id can trigger a CHECK failure and crash the program. It also requires its argument batchindex to contain three times the number of elements as...

IPython Shell Command Injection

The vulnerability of the shell command line interface for interactive IPython computations is related to access control errors. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

FreeRDP Buffer Overflow DoS

The vulnerability of the FreeRDP remote desktop protocol lies in the ability to write beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

MariaDB Pointer Assignment DoS

The vulnerability of the MariaDB database lies in pointer assignment errors. Exploiting this vulnerability allows an attacker to cause service failures...

MariaDB set_var.cc DoS

The vulnerability of the setvar.cc component of the MariaDB database system is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

QEMU USB Emulation

The vulnerability of QEMU’s emulation of hardware devices involves an incorrect pointer being freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Linux kernel cgroup1_parse_param Heap Buffer Overflow DoS

The vulnerability of the cgroup1parseparam function in the kernel/cgroup/cgroup-v1.c file of the Linux operating system is related to the lack of checks to ensure that the source parameter is indeed a string. Exploiting this vulnerability could allow an attacker to access confidential data,...

nscd netgroupcache Heap Buffer Overflow DoS

The vulnerability of the netgroupcache.c component, a caching daemon for system name services in the GNU C Library, is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to cause service failures...

Kate Language Server Protocol Access Confidential Data Compromise Service Failures

The vulnerability of the Language Server Protocol plugin for the text editor Kate is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

Ruby Date Parsing Uncontrolled Resource Consumption DoS

The vulnerability of Ruby programming language date parsing methods is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures...

FUSE File System DoS

The vulnerability of the FUSE file system in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

FreeRDP Buffer Overflow DoS

The vulnerability of the FreeRDP remote desktop protocol lies in the ability to write beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

MariaDB Resource Consumption DoS

The vulnerability of the MariaDB database is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a hacker to cause service failures...

QEMU SCSI emulator Host Shell Adapter Buffer Overflow DoS

The vulnerability of the am53c974 host shell adapter in the SCSI emulator and hardware support provided by QEMU relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

MariaDB InnoDB Data Compromise

The vulnerability of the InnoDB component in the MariaDB database relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

CVE-2022-31220

Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the state of the system or cause unexpected failures...

Design/Logic Flaw

Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the state of the system or cause unexpected failures...

Dell BIOS 安全漏洞

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. The Dell BIOS contains a security vulnerability that can be exploited by attackers to change the state of the system or cause unexpected failures...