Elliptic package 安全漏洞

Elliptic package is a JavaScript-based elliptic curve cryptographic library. A security vulnerability exists in crypto/elliptic that stems from IsOnCurve in crypto elliptic before Go 1.16.14 and 1.17. X before 1.17.7 may incorrectly return true in the case of X with a large value. integer values...

DEBIAN-CVE-2011-0904

The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0.x before 3.0.2, and 3.1.x before 3.1.1, when raw encoding is used, allows remote authenticated users to cause a denial of service daemon crash via a large 1...