15355 matches found
CVE-2023-45510
tsMuxer (git-2539d07) is reported to contain an alloc-dealloc-mismatch (operator new[] vs operator delete) error. Multiple sources (Red Hat CVE, NVD, OSV, CVE lists, CNNVD, PT-2023-29566) corroborate this description for tsMuxer. Public details do not specify affected platforms beyond the git com...
CVE-2023-45510
tsMuxer version git-2539d07 was discovered to contain an alloc-dealloc-mismatch operator new vs operator delete error...
tsMuxer Security Vulnerabilities
tsMuxer is a transport stream multiplexer for remixing/multiplexing elementary streams by Dan Personal Developer. A security vulnerability exists in the tsMuxer git-2539d07 version. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor...
PT-2023-29567 · Tsmuxer · Tsmuxer
Name of the Vulnerable Software and Affected Versions: tsMuxer version git-2539d07 Description: A memory leak in tsMuxer allows attackers to cause a Denial of Service DoS via a crafted MP4 file. Recommendations: For tsMuxer version git-2539d07, consider updating to a newer version that contains a...
tsMuxer Security Vulnerabilities
tsMuxer is a transport stream multiplexer for remixing/multiplexing elementary streams by Dan Personal Developer. A security vulnerability exists in the tsMuxer git-2539d07 version. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor...
CVE-2023-45510: Mismatched Memory Management Routines
tsMuxer version git-2539d07 was discovered to contain an alloc-dealloc-mismatch operator new vs operator delete error...
AZL-39895 CVE-2023-39325 affecting package git-lfs for versions less than 3.5.1-1
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...
AZL-34730 CVE-2023-39325 affecting package git-lfs for versions less than 3.6.1-1
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...
NULL Pointer Dereference in function gf_filter_pck_new_alloc_internal
Description NULL Pointer Dereference in function gffilterpcknewallocinternal at filtercore/filterpck.c:108. Version git log commit 5692dc729491805e0e5f55c21d50ba1e6b19e88e HEAD - master, origin/master, origin/HEAD Author: Aurelien David Date: Wed Oct 11 13:24:46 2023 +0200 ac3dmx: add remain size...
Git Windows Executable Code Execution
The vulnerability of the executeable file connect.exe in the distributed version of Git for Windows relates to an uncontrolled element in the search path. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
Git Windows doskey.exe Code Execution
The vulnerability of the distributed version of the Git version control system for Windows, called doskey.exe, is related to an uncontrolled element in the search path. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: sigstore-scaffolding, dgraph, hugo, kpt, prometheus-adapter, skaffold, dex, git-lfs, aws-efs-csi-driver, gitness, nginx-stable, memcached-exporter, flux-notification-controller, nri-prometheus, secrets-store-csi-driver-provider-gcp, kubernetes-csi-livenessprobe,...
Access control vulnerability due to dismissive git & test politics
Lines of code Vulnerability details Impact High risk access control vulnerability due to overutilizing rewards logic Proof of Concept Commenting out accessibility checks may lead to overutilizing existing rewards logic Tools Used Manual review Recommended Mitigation Steps git diff test coverage...
SaltStack 3000 < 3002.8 / 3003 < 3003.4 / 3004 < 3004.1 Multiple Vulnerabilities
According to its self-reported version number, the instance of SaltStack hosted on the remote server is affected by multiple vulnerabilities: - After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests...
CVE-2023-43809
Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft Serve could allow an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the allow-keyless...
Mozilla: Mozilla Employee's Token for sql.telemetry.mozilla.org Exposed in Git Commit
A Mozilla employee's API token was exposed in a GitHub repository, granting access to confidential data. The token was rotated and removed from the service...
CVE-2023-43809
CVE-2023-43809 affects Soft Serve (Git server) prior to v0.6.2. The vulnerability stems from insufficient validation of the public-key step during the SSH handshake when keyboard-interactive authentication is enabled, allowing an unauthenticated, remote attacker to bypass public-key authenticatio...
CVE-2023-43809 Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled
Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft Serve could allow an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the allow-keyless...
Debian: Security Advisory (DLA-3589-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3589-1] python-git security update
Debian LTS Advisory DLA-3589-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin September 29, 2023 https://wiki.debian.org/LTS Package : python-git Version : 2.1.11-1+deb10u2 CVE ID : CVE-2023-41040 Santos Gallegos discovered a blind local file inclusion in...