PYSEC-2024-284

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component compositionsolidsource...

lunasvg 安全漏洞

LunaSVG is a standalone C SVG rendering library by the individual developer Samuel Ugochukwu. A security vulnerability exists in lunasvg v2.3.9, which stems from a segmentation conflict in the component compositionsolidsource...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not refreshing the asynchronous PF work queue when the vCPU is destroyed...

lunasvg 安全漏洞

LunaSVG is a standalone C SVG rendering library by the individual developer Samuel Ugochukwu. A security vulnerability exists in lunasvg v2.3.9, which stems from a segmentation conflict in the component compositionsolidsourceover...

xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...

libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tiffax3.c, resulting in a denial of service...

Moderate: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

python-cryptography: NULL-dereference when loading PKCS7 certificates

A null-pointer dereference vulnerability was found in python-cryptography during the loading of PKCS7 certificates. Invoking "loadpempkcs7certificates" or "loadderpkcs7certificates" can trigger this issue and lead to subsequent segmentation fault and result in a Denial of Service DoS for any...

tcpslice: use-after-free in extract_slice()

A heap use-after-free flaw was found in tcpslices' extractslice. This flaw allows an attacker with local network access to pass a specially crafted 'pcap' file to tcpslice, causing segmentation fault. This vulnerability halts or crashes the application, leading to a denial of service...

kernel: drm/amdgpu: Fix sdma v4 sw fini error

An invalid pointer dereference flaw was found in the Linux kernel AMD GPU SDMA v4 driver's cleanup code. On systems with SDMA 4.2.2 hardware, driver unload or system shutdown triggers the sdmav40swfini cleanup path, which attempts to release firmware using an uninitialized or corrupted pointer,...

kernel: objtool: Fix SEGFAULT

A NULL pointer dereference was found in objtool, a build-time tool used during Linux kernel compilation. When findinsn returns NULL on failure, the code proceeds to dereference the NULL pointer, causing objtool to crash with a segmentation fault during kernel build operations...

SUSE CVE-2022-48662

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Really move i915gemcontext.link under ref protection i915perf assumes that it can use the i915gemcontext reference to protect its i915-gem.contexts.list iteration. However, this requires that we do not remove the...

CVE-2024-34043

O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message...

RHEL 9 : libtiff (RHSA-2024:2289)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2289 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: infinite...

PT-2024-40733 · Pcpp · Pcpp

Name of the Vulnerable Software and Affected Versions: pcpp affected versions not specified Description: The issue is related to a crash in the pcpp library, specifically in the pcpp::IPv6Layer destructor. The crash occurs due to a segmentation fault on an unknown address. Technical details about...

Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: infinite loop via a crafted TIFF file CVE-2022-40090 libtiff: segmentation fault in Fax3Encode in libtiff/tiffax3.c CVE-2023-3618 libtiff: integer overflow in tiffcp....

CVE-2022-48662

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Really move i915gemcontext.link under ref protection i915perf assumes that it can use the i915gemcontext reference to protect its i915-gem.contexts.list iteration. However, this requires that we do not remove the...

O-RAN RIC 安全漏洞

O-RAN RIC is a RIC application from O-RAN. A security vulnerability exists in O-RAN RIC that stems from the presence of a segmentation violation...

Fedora 36 : advancecomp (2023-e8c294f93d)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-e8c294f93d advisory. Update to 2.5 close RHBZ2162990; fix RHBZ2161641: Fix segmentation fault on invalid MNG size Tenable has extracted the preceding description block directly...

Fedora 40 : vips (2024-791f8d9804)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-791f8d9804 advisory. Automatic update for vips-8.15.1-1.fc40. Changelog Sat Jan 20 2024 Kleis Auke Wolthuizen - 8.15.1-1 - Update to 8.15.1 Resolves: rhbz2098477 Resolves:...