Lucene search
+L

2309 matches found

CVE
CVE
•added 2022/05/25 12:00 a.m.•204 views

CVE-2022-31650

CVE-2022-31650 is a vulnerability in SoX 14.4.2 where a floating-point exception occurs in lsx_aiffstartwrite (aiff.c) of libsox.a. Multiple trusted sources (OpenSUSE/OpenSUSE advisory, Amazon Linux 2 ALAS advisory, Astra Linux bulletin, etc.) reference this exact flaw and note that it can lead t...

5.5CVSS6.9AI score0.0116EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2022/05/25 12:00 a.m.•4 views

CVE-2022-31650

In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...

6.8CVSS0.0116EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2022/05/25 12:00 a.m.•19 views

PT-2022-6490 · Sox +4 · Sox +4

Name of the Vulnerable Software and Affected Versions: SoX version 14.4.2 Description: The issue is related to a floating-point exception in the lsx aiffstartwrite function in aiff.c in libsox.a. This vulnerability is associated with insufficient comparison, which may allow a remote attacker to...

10CVSS6.4AI score0.07401EPSS
SaveExploits19References117
AlpineLinux
AlpineLinux
•added 2022/05/25 12:00 a.m.•63 views

CVE-2022-31650

In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...

5.5CVSS7.2AI score0.0116EPSS
SaveExploits1
OSV
OSV
•added 2022/05/14 2:16 a.m.•43 views

GHSA-GVGC-RXMH-5HVW Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment

The Double.parseDouble method in Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a...

5CVSS6.2AI score0.2349EPSS
SaveExploits2References60
Github Security Blog
Github Security Blog
•added 2022/05/14 2:16 a.m.•42 views

Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment

The Double.parseDouble method in Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a...

5CVSS6.2AI score0.2349EPSS
SaveExploits2References60Affected Software1
CNVD
CNVD
•added 2022/05/13 12:00 a.m.•39 views

libsixel img2sixel Denial of Service Vulnerability

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. libsixel img2sixel version 1.8.6 suffers from a denial of service vulnerability stemming from a floating-point exception error in ssixelencoderdoresize, encoder.c:633. A remo...

4.3CVSS5.9AI score0.01037EPSS
SaveExploits1Affected Software1
NVD
NVD
•added 2022/05/11 2:15 p.m.•36 views

CVE-2022-29978

There is a floating point exception error in sixelencoderdoresize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...

6.5CVSS0.01037EPSS
SaveExploits1References1
OSV
OSV
•added 2022/05/11 2:15 p.m.•9 views

DEBIAN-CVE-2022-29978

There is a floating point exception error in sixelencoderdoresize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...

6.5CVSS6.3AI score0.01037EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/05/11 2:15 p.m.•5 views

CVE-2022-29978

There is a floating point exception error in sixelencoderdoresize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...

6.5CVSS6.6AI score0.01037EPSS
SaveExploits1References2
Prion
Prion
•added 2022/05/11 2:15 p.m.•19 views

Design/Logic Flaw

There is a floating point exception error in sixelencoderdoresize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...

4.3CVSS6.2AI score0.01037EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
•added 2022/05/11 1:12 p.m.•65 views

CVE-2022-29978

There is a floating point exception error in sixelencoderdoresize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...

6.5CVSS6.2AI score0.01037EPSS
SaveExploits1
Mend
Mend
•added 2022/05/11 1:12 p.m.•3 views

CVE-2022-29978

There is a floating point exception error in sixelencoderdoresize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...

7.1CVSS0.01037EPSS
SaveExploits1References4
OSV
OSV
•added 2022/05/11 1:12 p.m.•26 views

CVE-2022-29978

There is a floating point exception error in sixelencoderdoresize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...

6.5AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/05/11 12:00 a.m.•4 views

PT-2022-19940

Name of the Vulnerable Software and Affected Versions libsixel img2sixel version 1.8.6 Description The issue is related to a floating point exception error in the sixel encoder do resize function, located in encoder.c:633 of libsixel img2sixel. This error can be triggered by remote attackers usin...

6.5CVSS0.01037EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2022/05/11 12:00 a.m.•16 views

libsixel 安全漏洞

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. libsixel img2sixel version 1.8.6 suffers from a denial of service vulnerability stemming from a floating-point exception error in ssixelencoderdoresize, encoder.c:633. A remo...

6.5CVSS6.5AI score0.01037EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/11 12:00 a.m.•7 views

CVE-2022-29978: Incorrect Calculation

There is a floating point exception error in sixelencoderdoresize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...

6.5CVSS6.7AI score0.01037EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2022/05/09 12:00 a.m.•119 views

Mageia: Security Advisory (MGASA-2022-0160)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.7AI score0.01984EPSS
SaveExploits1References5
OSV
OSV
•added 2022/05/06 8:16 p.m.•58 views

MGASA-2022-0160 Updated dcraw packages fix security vulnerability

A buffer over-read in cropmaskedpixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information. CVE-2018-19565 A heap buffer over-read in parsetiffifd in dcraw through 9.28 could be used by...

9.3CVSS7AI score0.01984EPSS
SaveExploits1References4
Mageia
Mageia
•added 2022/05/06 8:16 p.m.•102 views

Updated dcraw packages fix security vulnerability

A buffer over-read in cropmaskedpixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information. CVE-2018-19565 A heap buffer over-read in parsetiffifd in dcraw through 9.28 could be used by...

9.3CVSS1.9AI score0.01984EPSS
SaveExploits1References3
Rows per page
Query Builder