CVE-2024-33780

MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::copyOut at /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted message...

CVE-2024-33783

MP-SPDZ v0.3.8 contains a segmentation violation in osuCrypto::SilentMultiPprfReceiver::expand (SilentPprf.cpp), enabling a Denial of Service via a crafted message. Impact: DoS. Affected component: SilentMultiPprfReceiver::expand in MP-SPDZ 0.3.8. Mitigation/workaround: PT-2024-25478 recommends d...

CVE-2024-33783

MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::expand in /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted message...

CVE-2024-33781

MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function octetStream::getbytes in /Tools/octetStream.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted message...

CVE-2024-33783

MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::expand in /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted message...

CVE-2024-33783

MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::expand in /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted message...

CVE-2024-33782

CVE-2024-33782 affects MP-SPDZ v0.3.8. The vulnerability is a stack overflow in OTExtensionWithMatrix::extend (location: /OT/OTExtensionWithMatrix.cpp) that can cause a Denial of Service via a crafted message. Public sources in the connected data confirm the vulnerable component and impact. There...

CVE-2024-33782

MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function OTExtensionWithMatrix::extend in /OT/OTExtensionWithMatrix.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted message...

CVE-2024-33780

MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::copyOut at /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted message...

Denial Of Service (DoS)

libfrr.so is vulnerable to Denial of Service DoS. The vulnerability is caused when receiving a MP/GR capability as a dynamic capability due to an incorrect placement of a continue statement within a while loop that iterates over a pointer. In this case, the pointer is not incremented before the...

SUSE CVE-2024-31949

In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...

CVE-2024-31949

An infinite loop vulnerability was found in FRRouting. Malformed data when receiving an MP/GR capability as a dynamic capability can result in a pointer not advancing. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product...

DEBIAN-CVE-2024-31949

In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...

CVE-2024-31949

In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...

UBUNTU-CVE-2024-31949

In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...

CVE-2024-31949

In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...

CVE-2024-31949

In FRRouting FRR through 9.1, an infinite loop can occur when receiving a MP/GR capability as a dynamic capability because malformed data results in a pointer not advancing...

Moderate: Red Hat Security Advisory: gmp update

An update for gmp is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Denial Of Service (DOS)

pocketmine/pocketmine-mp is vulnerable to Denial Of Service. The vulnerability is due to a lack of bounds checking when accessing inventory slots while calling function BaseInventory-getItem. This leads to an unhandled exception and potentially leads to Denial of service via malformed...

PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (3rd time)

Impact An attacker could crash PocketMine-MP by sending malformed JSON in LoginPacket. netresearch/jsonmapper allows objects to be hydrated from scalar types in JSON. However, due to the lack of validation in the code for this feature, it may output improperly initialized objects if applied to...