238 matches found
CVE-2022-26052
Uncontrolled search path element in the IntelR MPI Library before version 2021.6 for IntelR oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-26052
The CVE-2022-26052 issue concerns Intel® oneAPI Toolkits, specifically the Intel® MPI Library before 2021.6, where an Uncontrolled search path element may allow an authenticated local user to escalate privileges. The vulnerability is rooted in how search PATH elements are resolved in affected com...
CVE-2022-26052
Uncontrolled search path element in the IntelR MPI Library before version 2021.6 for IntelR oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access...
Intel OneApi Toolkits 代码问题漏洞
Intel OneApi Toolkits is a set of core tools and libraries from the United States Intel Intel. for developing high-performance, data-centric applications across different architectures. A security vulnerability exists in Intel oneAPI Deep Neural Network oneDNN versions prior to 2022.1, which stem...
Intel OneApi Toolkits 代码问题漏洞
Intel OneApi Toolkits is a set of core tools and libraries from the United States Intel Intel. It is used to develop high-performance, data-centric applications across different architectures. A security vulnerability exists in IntelR oneAPI Toolkit OpenMP prior to version 2022.1, which stems fro...
SUSE CVE-2020-27745
Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin...
Vulnerability of the mbedtls_mpi_exp_mod() function in Mbed TLS software, which allows a perpetrator to disclose protected information
The vulnerability of the mbedtlsmpiexpmod function in the Mbed TLS software is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an attacker to disclose the protected information...
AZL-13023 CVE-2021-36647 affecting package fluent-bit for versions less than 2.0.9-1
Use of a Broken or Risky Cryptographic Algorithm in the function mbedtlsmpiexpmod in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information typically an untrusted operating system attacking a...
DEBIAN-CVE-2021-36647
Use of a Broken or Risky Cryptographic Algorithm in the function mbedtlsmpiexpmod in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information typically an untrusted operating system attacking a...
Mbed TLS 加密问题漏洞
Mbed TLS is an open source, portable, easy to use, readable and flexible SSL library. A security vulnerability exists in Mbed TLS versions prior to 3.0.0, which stems from the use of a dangerous cryptographic algorithm in the mbedtlsmpiexpmod function of lignum.c. The vulnerability is caused by t...
Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Incomplete cleanup of multi-core shared buffers aka SBDR CVE-2022-21123 Incomplete cleanup of microarchitectural fill buffers aka SBDS CVE-2022-21125 Incomplete cleanup in specific special regist...
new packages: rpm-mpi-hooks
An update is available for rpm-mpi-hooks. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
The vulnerability of the mbedtls_mpi_exp_mod function in implementations of TLS and SSL protocols allows a attacker to cause a service failure.
The vulnerability of the mbedtlsmpiexpmod function in TLS and SSL protocol implementations is related to the lack of data size limitations during calculations. Exploiting this vulnerability allows a remote attacker to cause service failures...
Exploit for HTTP Request Smuggling in Sap Content_Server
It is an offensive tool for SAP memory pipesMPI desynchronizat...
Siemens S7-400 CPUs Improper Verification of Cryptographic Signature (CVE-2018-16557)
A vulnerability has been identified in SIMATIC S7-400 incl. F V6 and below All versions, SIMATIC S7-400 PN/DP V7 incl. F All versions, SIMATIC S7-400H V4.5 and below All versions, SIMATIC S7-400H V6 All versions V6.0.9, SIMATIC S7-410 All versions V8.2.1. Sending of specially crafted packets to...
Mageia: Security Advisory (MGASA-2018-0220)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Buffer Overflow
Slurm is vulnerable to buffer overflow. The vulnerability exists in the PMIx MPI plugin which causes a buffer overflow which leads to an application crash...
Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm and the window size is not chosen appropriately. This for example affects use of ElGamal in OpenPGP.
...
The vulnerability of the PMIx MPI resource manager plugin, developed by SLURM, arises from buffer overflows in memory. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the PMIx MPI resource manager plugin by SLURM is related to buffer overflow in memory. Exploiting this vulnerability allows an attacker who operates remotely to access confidential data, compromise its integrity, and cause service failures...
SUSE SLES12 Security Update : pdsh, slurm_20_02 (SUSE-SU-2020:2607-1)
This update for pdsh, slurm2002 fixes the following issues : Changes in slurm2002 : Add support for openPMIx also for Leap/SLE 15.0/1 bsc1173805. Do not run %check on SLE-12-SP2: Some incompatibility in tcl makes this fail. Remove unneeded build dependency to postgresql-devel. Disable build on s3...