arrow:arrow-ipc-file-fuzz: Heap-buffer-overflow in void arrow::internal::TransferBitmap<

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5696379421982720 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-file-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60a000000100 Cras...

CVE-2020-14059

An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list...

CVE-2020-14059

An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list...

CVE-2020-14059

An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list...

CVE-2020-14059: Improper Synchronization

An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list...

PT-2020-3004

Name of the Vulnerable Software and Affected Versions Squid versions 5.x prior to 5.0.3 Description The issue is related to errors in synchronization in the Ipc::Mem::PageStack::pop function of the Squid proxy server. Exploitation of this issue may allow a remote attacker to cause a denial of...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-4404-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4404-2 advisory. USN-4404-1 fixed vulnerabilities in the NVIDIA graphics drivers. This update provides the corresponding updates for the NVIDIA Linux DKMS...

USN-4404-1 nvidia-graphics-drivers-390, nvidia-graphics-drivers-440 vulnerabilities

Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not properly perform access control when performing IPC. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2020-5963 It was discovered that the UVM driver in the NVIDIA graphics...

CVE-2020-5963

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...

Improper access control

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...

UBUNTU-CVE-2020-5963

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...

Beckhoff Ipc Improper Access Control

Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a denial of service reboot or shutdown, create arbitrary users, or possibly have unspecified other impact via a crafted request, as demonstrated by a...

Debian DLA-2219-1 : feh security update

Tobias Stoeckmann discovered that it was possible to trigger an out-of-boundary heap write with the image viewer feh while receiving an IPC message. For Debian 8 'Jessie', this problem has been fixed in version 2.12-1+deb8u1. We recommend that you upgrade your feh packages. NOTE: Tenable Network...

PT-2022-13244 · Cri-O +1 · Cri-O +1

Name of the Vulnerable Software and Affected Versions: CRI-O versions 1.18 and earlier Description: An incorrect sysctls validation issue was found, allowing an attacker to apply sysctls from the list of "safe" sysctls specified for the cluster to the host if they can create a pod with a hostIPC...

CVE-2020-8487 ABB System 800xA Inter process communication vulnerability - System 800xA Base

Insufficient protection of the inter-process communication functions in ABB System 800xA Base all published versions enables an attacker authenticated on the local system to inject data, affect node redundancy handling...

CVE-2020-8478 ABB System 800xA Inter process communication vulnerability

Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl all published versions enables an attacker authenticated on the local system to inject data, affecting the online view...

CVE-2020-8485: Undefined Security Weakness

Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 all published versions enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash...

PT-2020-20167

Name of the Vulnerable Software and Affected Versions ABB System 800xA for DCI all published versions Description The issue is related to insufficient protection of inter-process communication functions, allowing an authenticated attacker on the local system to inject data. This enables the...

Scientific Linux Security Update : libqb on SL7.x x86_64 (20200407)

libqb: Insecure treatment of IPC temporary files C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135816; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

arrow:arrow-ipc-file-fuzz: Heap-buffer-overflow in org::apache::arrow::flatbuf::Message::Verify

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5693640900083712 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-file-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...