13698 matches found
CVE-2024-21523
All versions of the package images are vulnerable to Denial of Service DoS due to providing unexpected input types to several different functions. This makes it possible to reach an assert macro, leading to a process crash. Note: By providing some specific integer values like 0 to the size...
CVE-2024-21523
All versions of the package images are vulnerable to Denial of Service DoS due to providing unexpected input types to several different functions. This makes it possible to reach an assert macro, leading to a process crash. Note: By providing some specific integer values like 0 to the size...
CVE-2024-21523
CVE-2024-21523 affects the node-images package (Node.js) and is a Denial of Service (DoS) vulnerability caused by accepting unexpected input types in multiple functions, culminating in an assert path that crashes the process. Reports consistently describe that providing certain integers (e.g., 0)...
CVE-2024-21523
All versions of the package images are vulnerable to Denial of Service DoS due to providing unexpected input types to several different functions. This makes it possible to reach an assert macro, leading to a process crash. Note: By providing some specific integer values like 0 to the size...
PT-2024-8671 · Juniper Networks · Junos Evolved +1
Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.2R3-S4 Junos OS versions 21.4 prior to 21.4R2 Junos OS versions 22.2 prior to 22.2R3-S2 Junos OS Evolved versions prior to 21.2R3-S8-EVO Junos OS Evolved versions 21.4 prior to 21.4R2-EVO Description: An Improper...
PT-2024-18937 · Images · Images
Name of the Vulnerable Software and Affected Versions: package images affected versions not specified Description: The issue is related to providing unexpected input types to several different functions, which can lead to a process crash due to reaching an assert macro. Specifically, providing...
Siemens SIMATIC 安全漏洞
SIMATIC Energy Manager provides users with a scalable, non-industry-specific energy data management system.SIMATIC IPC DiagBase diagnostic software provides early identification of any potential faults on SIMATIC industrial controllers and helps to avoid or reduce system downtime.SIMATIC IPC...
CLSA-2024-1720468480 kernel: Fix of 89 CVEs
kvm: initialize all of the kvmdebugregs structure before sending it to userspace CVE-2023-1513 - wifi: mac80211: fix MBSSID parsing use-after-free CVE-2022-42719 - mac80211: always allocate struct ieee80211elems CVE-2022-42719 - netfilter: nftables: initialize registers in nftdochain...
kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng
A vulnerability was found in the hwrng component of the Linux kernel, which caused a deadlock when reading from /dev/hwrng into memory and mmap-ed from /dev/hwrng. This issue is triggered by a recursive read during a page fault and allows a local, authenticated attacker to cause a denial of servi...
Moderate: kernel security and bug fix update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net/mlx5e: Fix operation precedence bug in port timestamping napipoll context CVE-2023-52626 kernel: Bluetooth: Avoid potential use-after-free in hcierrorreset CVE-2024-26801 kernel:...
CVE-2024-32673
Improper Validation of Array Index vulnerability in Samsung Open Source Walrus Webassembly runtime engine allows a segmentation fault issue. This issue affects Walrus: before 72c7230f32a0b791355bbdfc78669701024b0956...
CVE-2024-32673
The CVE-2024-32673 issue affects Samsung Walrus (WebAssembly runtime) and is triggered by improper validation of an array index in Walrus prior to commit 72c7230f32a0b791355bbdfc78669701024b0956. The vulnerability can cause a segmentation fault within the Walrus WebAssembly engine. Affected versi...
SAMSUNG WALRUS Security Vulnerability
SAMSUNG WALRUS is a project of the South Korean company Samsung SAMSUNG. It aims to provide a lightweight WebAssembly runtime engine. A security vulnerability exists in SAMSUNG WALRUS that stems from improper array index validation leading to a segmentation error...
CBL Mariner 2.0 Security Update: patch (CVE-2018-6951)
The version of patch installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2018-6951 advisory. - An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL...
PT-2024-24758 · Samsung · Walrus
Name of the Vulnerable Software and Affected Versions: Walrus versions before 72c7230f32a0b791355bbdfc78669701024b0956 Description: The issue is related to an Improper Validation of Array Index in the Samsung Open Source Walrus Webassembly runtime engine, which can cause a segmentation fault...
kernel: ovl: fix leaked dentry
In the Linux kernel, the following vulnerability has been resolved: ovl: fix leaked dentry Since commit 6815f479ca90 "ovl: use only uppermetacopy state in ovllookup", overlayfs doesn't put temporary dentry when there is a metacopy error, which leads to dentry leaks when shutting down the related...
kernel: hwrng: core - Fix page fault dead lock on mmap-ed hwrng
A vulnerability was found in the hwrng component of the Linux kernel, which caused a deadlock when reading from /dev/hwrng into memory and mmap-ed from /dev/hwrng. This issue is triggered by a recursive read during a page fault and allows a local, authenticated attacker to cause a denial of servi...
TensorFlow has segmentation fault in tfg-translate
...