CVE-2022-35019

A segmentation fault was found in advancecomp in the mngreaddelta function of the mng.c file. The flaw occurs due to invalid WRITE memory access. This flaw allows an attacker to cause a crash by tricking a user into opening a malformed file, leading to a denial of service attack...

CVE-2022-35018

A segmentation fault was found in advancecomp in the colequal function of the mngex.cc file. The flaw occurs due to invalid READ memory access. This flaw allows an attacker to cause a crash by tricking a user into opening a malformed file, leading to a denial of service attack...

CVE-2022-35014

A segmentation fault was found in advancecomp caused by invalid READ memory access. This flaw allows an attacker to cause a crash by tricking a user into opening a malformed file, leading to a denial of service attack...

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google Inc. in the United States. Google TensorFlow suffers from an input validation error vulnerability that stems from a segmentation error in the converter and crashes the Python process when using a...

PT-2022-33338 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to a page fault in the snd hda codec shutdown function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google, Inc. in the United States. Google TensorFlow suffers from an input validation error vulnerability that stems from a segmentation error that can be used to trigger a denial-of-service attack if...

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. An input validation error vulnerability exists in Google TensorFlow, which stems from a segmentation error that occurs if QuantizedAdd is given a tensor of non-zero rank mininput or maxinput. An attacke...

Debian dla-3114 : libmariadb-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3114 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3114-2 [email protected] https://www.debian.org/lts/security/...

PT-2022-33331 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to a page fault in the snd hda codec shutdown function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google, Inc. in the United States. Google TensorFlow suffers from an input validation error vulnerability that stems from a segmentation error that can be used to trigger a denial-of-service attack if...

CVE-2022-38890

Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njsutf8next at src/njsutf8.h...

[SECURITY] [DLA 3109-1] nova security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3109-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 15, 2022 https://wiki.debian.org/LTS -...

PT-2022-37280 · Sass · Sass

Name of the Vulnerable Software and Affected Versions: Sass affected versions not specified Description: The issue is related to a crash in the Sass software, specifically a segmentation fault on an unknown address. The crash occurs in the Sass::unifyComplex function, which is called by...

Debian dla-3109 : nova-api - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3109 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3109-1 [email protected] https://www.debian.org/lts/security/...

Oracle Linux 8 : mariadb:10.3 (ELSA-2022-6443)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6443 advisory. galera 25.3.35-1 - Rebase to 25.3.35 mariadb 3:10.3.35-1 - Rebase to 10.3.35 3:10.3.34-1 - Rebase to 10.3.34 Tenable has extracted the preceding...

Nginx 缓冲区错误漏洞

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx, Inc. in the United States. njs is one of the scripting language components that supports extended NGINX functionality. A security vulnerability exists in Nginx NJS version v0.7.7, which stems from ...

GPAC 安全漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in versions prior to GPAC 2.1.0-DEV that stems from a segmentation error in SFSExpression...

PT-2022-24613 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: Nginx NJS version 0.7.7 Description: A segmentation violation was discovered in Nginx NJS via the njs utf8 next function at src/njs utf8.h. Recommendations: For Nginx NJS version 0.7.7, at the moment, there is no information about a newer...

GHSA-2P5H-HPJ4-FXGG LIEF contains a segmentation violation

LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69. A patch is available at commit ca938740264f1fcb18f91cba8e4039c518ecb75b...

PT-2022-37278 · Git +1 · Cyclonedds

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to a segmentation fault on an unknown address. The crash state includes ddsi config init and fuzz config init.c, indicating the...