GHSA-VCJJ-9VG7-VF68 Null pointer dereference in TFLite

Impact An attacker can craft a TFLite model that would trigger a null pointer dereference, which would result in a crash and denial of service: python import tensorflow as tf model = tf.keras.models.Sequential model.addtf.keras.Inputshape=1, 2, 3 model.addtf.keras.layers.Dense0, activation='relu'...

Wasm3 缓冲区错误漏洞

wasm3 is the fastest WebAssembly interpreter and the most versatile runtime. A security vulnerability exists in wasm3 that stems from a heap-based buffer overflow...

GSD-2021-1001249 bpf: Fix tail_call_reachable rejection for interpreter when jit failed

bpf: Fix tailcallreachable rejection for interpreter when jit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.54 by commit...

UVI-2021-1001249 bpf: Fix tail_call_reachable rejection for interpreter when jit failed

bpf: Fix tailcallreachable rejection for interpreter when jit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.54 by commit...

GSD-2021-1001158 bpf: Fix tail_call_reachable rejection for interpreter when jit failed

bpf: Fix tailcallreachable rejection for interpreter when jit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...

UVI-2021-1001158 bpf: Fix tail_call_reachable rejection for interpreter when jit failed

bpf: Fix tailcallreachable rejection for interpreter when jit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...

PT-2021-25719

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.53 Description The issue is related to the bpf Berkeley Packet Filter in the Linux Kernel, specifically with the tail call reachable rejection for the interpreter when the JIT Just-In-Time compilation...

PT-2021-29714

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.53 Description The issue is related to the bpf interpreter in the Linux Kernel. It concerns a problem with tail call reachable rejection when the jit failed. The actual impact and potential for attack...

PT-2021-29623

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.13.5 Description The issue is related to the bpf Berkeley Packet Filter in the Linux Kernel, specifically with the tail call reachable rejection for the interpreter when the JIT Just-In-Time compilation...

PT-2021-25628

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.13.5 Description: The issue is related to the bpf Berkeley Packet Filter in the Linux Kernel, specifically with the tail call reachable rejection for the interpreter when the JIT Just-In-Time compiler...

The vulnerability of the Python programming language interpreter, related to uncontrolled resource consumption, allows attackers to trigger a service failure.

The vulnerability of the Python programming language interpreter is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the ldebug.c component of the Lua script interpreter, related to a numerical loss of significance, allows an attacker to trigger a service failure.

The vulnerability of the ldebug.c component of the Lua script interpreter is related to a numerical loss of significance. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

REvil Ransomware gang behind the Kaseya VSA Supply-Chain attack

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. The REvil ransomware group was successful in carrying out a supply chain attack by exploiting the zero-day vulnerability CVE-2021-30116 in the Kaseya VSA server and delivering a malicious script to all the computer devices...

ruby: BasicSocket#read_nonblock method leads to information disclosure

An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocketreadnonblockrequestedsize, buffer, exception: false, the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous valu...

Dovecot 1.2.0 - 2.3.14 DoS Vulnerability

Dovecot is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

CVE-2021-27627

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method ChartInterpreter::DoIt which will...

PT-2021-17562 · Sap · Sap Internet Graphics Server

Name of the Vulnerable Software and Affected Versions: SAP Internet Graphics Service versions 7.20, 7.20EXT, 7.53, 7.20 EX2, 7.81 Description: The issue allows an unauthenticated attacker to submit a malicious request over a network after retrieving an existing system state value. This is due to...

SUSE: Security Advisory (SUSE-SU-2016:1581-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial of Service in mcfriend99/bird

✍️ Description The Bird interpreter is vulnerable to memory leaks. This occurs due to memory being allocated but never freed during the compilation/interpretation process. 🕵️‍♂️ Proof of Concept Compile the interpreter with ASAN enabled. Run the interpreter and execute print123 and then exit. You...

Interpreter crash from `tf.io.decode_raw`

Impact The implementation of tf.io.decoderaw produces incorrect results and crashes the Python interpreter when combining fixedlength and wider datatypes. python import tensorflow as tf tf.io.decoderawtf.constant"1","2","3","4", tf.uint16, fixedlength=4 The implementation of the padded version is...