13837 matches found
CVE-2022-32089
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component stselectlexunit::excludelevel...
CVE-2022-32084
Removed by vendor...
CVE-2022-32089
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component stselectlexunit::excludelevel...
CVE-2022-32089
Removed by vendor...
CVE-2022-32084
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect...
MariaDB 安全漏洞
MariaDB is a free and open source database management system from the Mariadb Foundation and a version of the MySQL branch that uses the Maria storage engine.There is a security vulnerability in the MariaDB version that stems from the existence of a segmentation error found through the component...
CVE-2022-32084
CVE-2022-32084 affects MariaDB servers (component: sub_select) and is documented to cause a segmentation fault/server crash. The Initial Description notes a vulnerability in MariaDB versions 10.2 through 10.7. Connected advisories reference concrete fixes for this issue in MariaDB-related securit...
CVE-2022-32084
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect...
CVE-2022-32084
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect...
CVE-2022-32089
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component stselectlexunit::excludelevel...
ruby: Buffer overrun in String-to-Float conversion
A buffer overrun vulnerability was found in Ruby. The issue occurs in a conversion algorithm from a String to a Float that causes process termination due to a segmentation fault, but under limited circumstances. This flaw may cause an illegal memory read...
GSD-2022-1003455 KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2
KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.45 by commit...
GSD-2022-1003175 KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2
KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.13 by commit...
GSD-2022-1002873 KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2
KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.2 by commit...
SUSE SLES15 Security Update : mariadb (SUSE-SU-2022:2189-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2189-1 advisory. Update to 10.4.25 bsc1199928: - CVE-2021-46669 bsc1199928 - CVE-2022-21427 bsc1199928 - CVE-2022-27376 bsc1198628 - CVE-2022-27377...
Null pointer dereference in function diff_check
Description Null pointer dereference in function diffcheck at diff.c:1923 Version commit 8eba2bd291b347e3008aa9e565652d51ad638cfa HEAD, tag: v8.2.5151 Proof of Concept guest@elk:/trung/vim2/src$ valgrind ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /home/guest/trung/poc/poc22 -c :qa! ==4357==...
OESA-2022-1719 e2fsprogs security update
The e2fsprogs package consists of a lot of tools for users to create, check, modify, and correct any inconsistencies in second extended file system. Security Fixes: An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly...
Denial Of Service (DoS)
Envoy is vulnerable to denial of service. The vulnerability exists due to a segmentation fault in the GrpcHealthCheckerImpl allowing an attacker to crash the system by controlling an upstream host and also controlling the service discovery of that host via DNS, the EDS API, etc. and forcing the...
