Lucene search
K

1376 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.1 views

The vulnerability of the randomize_iparp function in the edit_packet.c component of the editing and replaying utility Pcap Tcpreplay allows a hacker to cause a service failure.

The vulnerability of the randomizeiparp function in the editpacket.c component of the Pcap editing and replay utility Tcpreplay is related to writing beyond buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created pcap file...

7.1CVSS6.8AI score0.00161EPSS
Exploits1References6Affected Software2
Github Security Blog
Github Security Blog
added 2022/04/01 1:36 p.m.28 views

Use after free in Wasmtime

There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default then you are not affected. If you are explicitly disabling the Wasm referenc...

9.8CVSS1.1AI score0.00393EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2022/04/01 1:36 p.m.1 views

GHSA-GWC9-348X-QWV2 Use after free in Wasmtime

There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default then you are not affected. If you are explicitly disabling the Wasm referenc...

8.1CVSS6AI score0.00393EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.5 views

The vulnerability in the tinyexr::DecodeEXRImage component of the OpenEXR Tinyexr processing library allows a attacker to cause a service failure.

The vulnerability of the tinyexr::DecodeEXRImage component in the OpenEXR Tinyexr processing library is related to an error in the array indexing mechanism. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.5CVSS7.2AI score0.00306EPSS
Exploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.3 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

4.9CVSS6.4AI score0.00266EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.1 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

4.9CVSS6.4AI score0.00311EPSS
Exploits0References5Affected Software2
NVD
NVD
added 2022/03/31 11:15 p.m.8 views

CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS0.00393EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2022/03/31 11:15 p.m.28 views

CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS7.2AI score0.00393EPSS
Exploits0References3
OSV
OSV
added 2022/03/31 11:15 p.m.0 views

UBUNTU-CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS7.3AI score0.00393EPSS
Exploits0References4
Prion
Prion
added 2022/03/31 11:15 p.m.13 views

Design/Logic Flaw

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

6.8CVSS9.6AI score0.00393EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2022/03/31 11:0 p.m.88 views

CVE-2022-24791

The CVE refers to Wasmtime (WebAssembly JIT runtime using Cranelift) with a use-after-free vulnerability that occurs when running Wasm code using externrefs while epoch interruption is enabled. The issue is caused by Cranelift failing to emit stack maps for safepoints inside cold blocks, which re...

9.8CVSS9.1AI score0.00393EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2022/03/31 11:0 p.m.12 views

CVE-2022-24791 Use after free in Wasmtime

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

8.1CVSS9.2AI score0.00393EPSS
Exploits0References4
Cvelist
Cvelist
added 2022/03/31 11:0 p.m.11 views

CVE-2022-24791 Use after free in Wasmtime

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

8.1CVSS9.9AI score0.00393EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2022/03/31 11:0 p.m.3 views

CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS9.7AI score0.00393EPSS
Exploits0
OSV
OSV
added 2022/03/31 12:0 p.m.0 views

RUSTSEC-2022-0016 Use after free with `externref`s and epoch interruption in Wasmtime

Use after free with externrefs and epoch interruption in Wasmtime...

9.8CVSS7.2AI score0.00393EPSS
Exploits0References3
RustSec
RustSec
added 2022/03/31 12:0 p.m.26 views

Use after free with `externref`s and epoch interruption in Wasmtime

Use after free with externrefs and epoch interruption in Wasmtime...

9.8CVSS1.6AI score0.00393EPSS
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/30 12:0 a.m.3 views

Vulnerability of the Server component: The Replication function of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server database management system’s replication component is related to errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

6.8CVSS6.3AI score0.0018EPSS
Exploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/30 12:0 a.m.1 views

Vulnerability of the MySQL Server component: The DML mechanism of the MySQL Database Management System allows attackers to compromise data integrity or cause service interruptions.

The vulnerability of the MySQL Server component exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise data integrity or cause service failures...

7.5CVSS6.4AI score0.00279EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/30 12:0 a.m.1 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component involves errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

6.3CVSS6.3AI score0.00279EPSS
Exploits0References8Affected Software2
RedHat Linux
RedHat Linux
added 2022/03/28 12:1 p.m.2 views

expat: Integer overflow in lookup in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

8.8CVSS7.5AI score0.00206EPSS
Exploits0References5
Rows per page
Query Builder