94 matches found
Fedora: Security Advisory for rust-sarif-fmt (FEDORA-2024-ce2936b568)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: rust-sarif-fmt-0.4.2-3.fc40
View pretty print SARIF files in terminal...
DEBIAN-CVE-2021-47264
In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Fix Null-point-dereference in fmtsinglename Check the return value of devmkstrdup in case of Null-point-dereference...
UBUNTU-CVE-2021-47264
In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Fix Null-point-dereference in fmtsinglename Check the return value of devmkstrdup in case of Null-point-dereference...
SUSE CVE-2023-46049
LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata function via a crafted pdflatex.fmt file or perhaps a crafted .o file to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the...
PT-2024-13322 · Llvm · Llvm
Name of the Vulnerable Software and Affected Versions: LLVM version 15.0.0 Description: The issue is related to a NULL pointer dereference in the parseOneMetadata function. This can be triggered via a crafted pdflatex.fmt file or possibly a crafted .o file to llvm-lto. However, the relationship...
SUSE CVE-2021-46944
In the Linux kernel, the following vulnerability has been resolved: media: staging/intel-ipu3: Fix memory leak in imufmt We are losing the reference to an allocated memory if try. Change the order of the check to avoid that...
UBUNTU-CVE-2021-46944
In the Linux kernel, the following vulnerability has been resolved: media: staging/intel-ipu3: Fix memory leak in imufmt We are losing the reference to an allocated memory if try. Change the order of the check to avoid that...
UBUNTU-CVE-2020-19187
Buffer Overflow vulnerability in fmtentry function in progs/dumpentry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command...
PT-2023-11514 · Ncurses +1 · Ncurses +1
Name of the Vulnerable Software and Affected Versions: ncurses version 6.1 Description: The issue is related to a Buffer Overflow vulnerability in the fmt entry function in progs/dump entry.c:1100 of ncurses. This vulnerability allows remote attackers to cause a denial of service via crafted...
PT-2023-11515 · Ncurses +1 · Ncurses +1
Name of the Vulnerable Software and Affected Versions: ncurses version 6.1 Description: The issue is related to a Buffer Overflow vulnerability in the fmt entry function, located in progs/dump entry.c:1116, which allows remote attackers to cause a denial of service via crafted commands...
SUSE CVE-2017-16942
In libsndfile 1.0.25 fixed in 1.0.26, a divide-by-zero error exists in the function wavw64readfmtchunk in wavw64.c, which may lead to DoS when playing a crafted audio file...
matrix-sdk 0.6.0 logs access tokens
When sending Matrix requests using an affected version of matrix-sdk in an application that writes logs using tracing-subscriber in a way that includes fields of tracing spans such as tracingsubscribers default text output from the fmt module, these logs will contain the user's access token...
Input validation
In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342197; Issue ID: ALPS07342197...
CVE-2022-26473
CVE-2022-26473 concerns a use-after-free in the vdec fmt component caused by improper locking, enabling local privilege escalation with System privileges required. Exploitation status is not detailed in the provided documents. Multiple sources (NVD, Red Hat, CVE lists, CNVD, PRION, CNNVD, PRON, P...
PT-2022-17886 · Vdec Fmt · Vdec Fmt
Name of the Vulnerable Software and Affected Versions: vdec fmt affected versions not specified Description: The issue is related to a possible use after free due to improper locking in vdec fmt. This could lead to local escalation of privilege, with System execution privileges needed. User...
CVE-2022-26473
In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342197; Issue ID: ALPS07342197...
OSV-2022-168 Heap-buffer-overflow in fmt::v8::detail::big_decimal_fp fmt::v8::detail::write_padded<
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44791 Crash type: Heap-buffer-overflow WRITE 1 Crash state: fmt::v8::detail::bigdecimalfp fmt::v8::detail::writepadded std::1::backinsertiteratorfmt::v8::basicmemorybufferchar, 500ul, std::...
Mageia: Security Advisory (MGASA-2020-0258)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
