50 matches found
Vyper 安全漏洞
Vyper is a Pythonic smart contract language for EVM open sourced by vyperlang. A security vulnerability exists in Vyper 0.4.2rc1 and earlier versions, which stems from a slice function that may skip side-effect evaluation when the output length is zero...
Linux Distros Unpatched Vulnerability : CVE-2024-56636
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - geneve: do not assume mac header is set in genevexmitskb We should not assume mac header is set in output path. Use skbethhdr instead of ethhdr to fix the issue...
SUSE CVE-2022-49228
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a btf decltag bug when tagging a function syzbot reported a btf decltag bug with stack trace below: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 1 PREEMPT SMP KASAN KASAN:...
USN-7259-3 eglibc vulnerability
USN-7259-1 fixed a vulnerability in GNU C Library. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that GNU C Library incorrectly handled memory when using the assert function. An attacker could possibly use this issue to cause a...
DEBIAN-CVE-2024-46832
In the Linux kernel, the following vulnerability has been resolved: MIPS: cevt-r4k: Don't call getc0compareint if timer irq is installed This avoids warning: 0.118053 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:283 Caused by getc0compareint on secondary CPU. We al...
DEBIAN-CVE-2023-52694
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tpd12s015: Drop buggy exit annotation for remove function With tpd12s015remove marked with exit this function is discarded when the driver is compiled as a built-in. The result is that when the driver unbinds there is...
The vulnerability of the AUX function in Cisco IOS XE operating systems allows a hacker to trigger a service failure.
The vulnerability of the AUX function in Cisco IOS XE operating systems is related to errors in processing incoming traffic. Exploiting this vulnerability can allow attackers to cause service failures...
DEBIAN-CVE-2021-47096
In the Linux kernel, the following vulnerability has been resolved: ALSA: rawmidi - fix the uninitalized userpversion The userpversion was uninitialized for the user space file structure in the open function, because the file private structure use kmalloc for the allocation. The kernel ALSA...
AZL-35394 CVE-2023-49557 affecting package yasm 1.3.0-17
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasmsectionbcsfirst function in the libyasm/section.c component...
The vulnerability of the MP4SdpAtom::Read() function in the atom_sdp.cpp component of the library for creating, modifying, and reading MP4 files, mp4v2, allows a malicious actor to cause a service failure.
The vulnerability of the MP4SdpAtom::Read function in the atomsdp.cpp component of the library for creating, modifying, and reading MP4 files in mp4v2 is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...
SUSE CVE-2017-15371
There is a reachable assertion abort in the function soxappendcomment in formats.c in Sound eXchange SoX 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file...
SUSE CVE-2018-19800
aubio v0.4.0 to v0.4.8 has a Buffer Overflow in newaubiotempo...
SUSE CVE-2019-14292
An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA!=6 case 1...
Stack overflow
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the delnum parameter in the icpdeleteimg sub41DEDC function...
The vulnerability of the TiXmlParsingData::Stamp function in the tinyxmlparser.cpp component, a XML parser for TinyXML, allows a attacker to cause a service failure.
The vulnerability of the TiXmlParsingData::Stamp function in the tinyxmlparser.cpp component of the TinyXML parser is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially...
DEBIAN-CVE-2021-32490
A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv via crafted djvu file may lead to application crash and other consequences...
TikTok: Blocked user can send notification by liking the message due to Logical Bug
A functional bug had the potential to permit a blocked user to send notifications by liking another user's message.We thank @sandipgyawali for reporting this to our team and confirming the resolution...
PT-2020-6421 · Cflow +2 · Cflow +2
Name of the Vulnerable Software and Affected Versions: cflow version 1.6 Description: The issue is related to a Use-after-Free vulnerability in the call function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee. This vulnerability may allow an attacker...
DEBIAN-CVE-2020-4032
In FreeRDP before version 2.1.2, there is an integer casting vulnerability in updaterecvsecondaryorder. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2...