Lucene search
+L

13631 matches found

RedHat Linux
RedHat Linux
added 2025/03/18 6:54 p.m.9 views

php: Use after free due to php_filter_float() failing for ints

A flaw was found in PHP. The vulnerability occurs due to the malformed phpfilterfloat function and leads to a use-after-free vulnerability. This flaw allows an attacker to inject a malicious file, leading to a crash or a Segmentation fault...

9.8CVSS6.8AI score0.03002EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/03/18 9:01 a.m.58 views

CVE-2025-0755 MongoDB C Driver bson library may be susceptible to buffer overflow

The various bsonappend functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size INT32MAX, resulting in a segmentation fault and possible application crash. This...

8.4CVSS0.00759EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/18 9:01 a.m.149 views

CVE-2025-0755

CVE-2025-0755 involves potential buffer overflow in the MongoDB C driver (bson_append family) that can cause a segmentation fault when a final BSON document exceeds INT32_MAX. Affected: libbson < 1.27.5; MongoDB Server < 8.0.1 (v8.0) and

8.4CVSS8.5AI score0.00759EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2025/03/18 9:01 a.m.28 views

CVE-2025-0755 MongoDB C Driver bson library may be susceptible to buffer overflow

The various bsonappend functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size INT32MAX, resulting in a segmentation fault and possible application crash. This...

8.4CVSS7.3AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/03/18 9:01 a.m.44 views

CVE-2025-0755 MongoDB C Driver bson library may be susceptible to buffer overflow

The various bsonappend functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size INT32MAX, resulting in a segmentation fault and possible application crash. This...

8.4CVSS7.2AI score0.00759EPSS
SaveExploits0References2
MongoDB
MongoDB
added 2025/03/18 9:00 a.m.39 views

MongoDB C Driver bson library may be susceptible to buffer overflow

The various bsonappend functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size INT32MAX, resulting in a segmentation fault and possible application crash. This...

8.4CVSS7.2AI score0.00759EPSS
SaveExploits0References1Affected Software2
Veracode
Veracode
added 2025/03/18 7:50 a.m.20 views

Out-of-Memory (OOM)

io.smallrye, smallrye-fault-tolerance-core is vulnerable to an out-of-memory OOM. The vulnerability is due to uncontrolled object creation in meterMap when calling the metrics URI, allowing an attacker to trigger excessive memory consumption and cause a denial of service DoS condition...

7.5CVSS6.5AI score0.00984EPSS
SaveExploits0References11Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/18 12:00 a.m.20 views

The vulnerability of the kprobe_fault_handler() function in the arch/riscv/kernel/probes/kprobes.c file of the module for the Linux operating system’s RISC-V architecture-based kernel, allows a hacker to trigger a service failure.

The vulnerability of the kprobefaulthandler function in the arch/riscv/kernel/probes/kprobes.c file of the module for the Linux operating system’s RISC-V architecture-based kernel involves incorrect input validation. Exploiting this vulnerability could allow an attacker to trigger a service failu...

5.5CVSS5.5AI score0.00208EPSS
SaveExploits0References10Affected Software2
OSV
OSV
added 2025/03/17 8:16 p.m.8 views

RLSA-2024:11237 Moderate: libsndfile:1.0.31 security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fixes: libsndfile: Segmentation fault error in oggvorbis.c:417 vorbisanalysiswrote CVE-2024-50612 For more details about the security issues, including the impact, a CVSS score,...

5.5CVSS6.7AI score0.00311EPSS
SaveExploits1References2
Rockylinux
Rockylinux
added 2025/03/17 8:16 p.m.8 views

libsndfile:1.0.31 security update

An update is available for libsndfile. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libsndfile is a C library for reading and writing files containing sampled...

5.5CVSS6.8AI score0.00311EPSS
SaveExploits1
Packet Storm News
Packet Storm News
added 2025/03/17 12:00 a.m.5 views

Linux 6.4 VMA Use-After-Free / Race Condition

Linux 6.4 suffers from a use-after-free condition when per-VMA locks introduce a race between page fault and MREMAPDONTUNMAP...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/03/16 6:14 p.m.24 views

CVE-2025-29779

Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing VSS scheme. In versions 0.8.0b2 and prior, the secureredundantexecution function in feldmanvss.py attempts to mitigate fault injection attacks by executing a function...

5.4CVSS6.3AI score0.00184EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/14 7:55 p.m.15 views

GHSA-R8GC-QC2C-C7VH Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`

Description: The secureredundantexecution function in feldmanvss.py attempts to mitigate fault injection attacks by executing a function multiple times and comparing results. However, several critical weaknesses exist: 1. Python's execution environment cannot guarantee true isolation between...

5.4CVSS6.7AI score0.00184EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/03/14 7:55 p.m.19 views

Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`

Description: The secureredundantexecution function in feldmanvss.py attempts to mitigate fault injection attacks by executing a function multiple times and comparing results. However, several critical weaknesses exist: 1. Python's execution environment cannot guarantee true isolation between...

5.4CVSS6.7AI score0.00184EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2025/03/14 6:15 p.m.14 views

CVE-2025-29779

Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing VSS scheme. In versions 0.8.0b2 and prior, the secureredundantexecution function in feldmanvss.py attempts to mitigate fault injection attacks by executing a function...

5.4CVSS0.00184EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/03/14 5:24 p.m.30 views

CVE-2025-29779 Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`

Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing VSS scheme. In versions 0.8.0b2 and prior, the secureredundantexecution function in feldmanvss.py attempts to mitigate fault injection attacks by executing a function...

5.4CVSS0.00184EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/03/14 5:24 p.m.11 views

CVE-2025-29779 Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`

Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing VSS scheme. In versions 0.8.0b2 and prior, the secureredundantexecution function in feldmanvss.py attempts to mitigate fault injection attacks by executing a function...

5.4CVSS6.2AI score0.00184EPSS
SaveExploits0References3
CVE
CVE
added 2025/03/14 5:24 p.m.73 views

CVE-2025-29779

The CVE describes a fault-injection countermeasure weakness in the Python implementation of Post-Quantum Secure Feldman’s Verifiable Secret Sharing (VSS) in PostQuantum-Feldman-VSS, specifically the secure_redundant_execution function. Affected versions up to 0.8.0b2 are vulnerable because Python...

5.4CVSS6.2AI score0.00184EPSS
SaveExploits0References3
OSV
OSV
added 2025/03/14 5:24 p.m.9 views

CVE-2025-29779 Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`

Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing VSS scheme. In versions 0.8.0b2 and prior, the secureredundantexecution function in feldmanvss.py attempts to mitigate fault injection attacks by executing a function...

5.4CVSS6.6AI score
SaveExploits0References5
OSV
OSV
added 2025/03/14 11:08 a.m.5 views

OESA-2025-1278 syslinux security update

The Syslinux Project covers lightweight bootloaders for MS-DOS FAT filesystems SYSLINUX, network booting PXELINUX, bootable "El Torito" CD-ROMs ISOLINUX, and Linux ext2/ext3/ext4 or btrfs filesystems EXTLINUX. The project also includes MEMDISK, a tool to boot legacy operating systems such as DOS...

5.3CVSS7.1AI score0.03833EPSS
SaveExploits1References2
Rows per page
Query Builder