283 matches found
CVE-2022-48328
app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles orderedurlparams and additionaldelimiters...
SUSE CVE-2012-2677
Integer overflow in the orderedmalloc function in boost/pool/pool.hpp in Boost Pool before 3.9 makes it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large memory chunk size value, which causes less memory to be allocated than expected...
SUSE CVE-2013-6671
The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements...
SUSE CVE-2017-7495
fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles a needs-flushing-before-commit list, which allows local users to obtain sensitive information from other users' files in opportunistic circumstances by waiting for a hardware reset, creating a new...
SUSE CVE-2019-17005
The plain text serializer used a fixed-size array for the number of elements it could process; however it was possible to overflow the static-sized array leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 68.3, Firefox ESR 68.3, and Firefox 71...
PT-2025-37664
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A missing check for the return value of alloc ordered workqueue can lead to a NULL pointer dereference within the drm/msm/dsi subsystem of the Linux kernel. The vulnerability is addresse...
PT-2025-52975
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DRM/MSM/HDMI subsystem. Specifically, a missing check for the return value of alloc ordered workqueue can lead to a NULL pointer dereference in hdmi...
UVI-2021-1002307 btrfs: fix memory ordering between normal and ordered work functions
btrfs: fix memory ordering between normal and ordered work functions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...
UVI-2021-1002257 btrfs: fix memory ordering between normal and ordered work functions
btrfs: fix memory ordering between normal and ordered work functions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.162 by commit...
[SECURITY] Fedora 35 Update: getdata-0.11.0-1.fc35
The GetData Project is the reference implementation of the Dirfile Standards, a filesystem-based database format for time-ordered binary data. The Dirfile database format is designed to provide a fast, simple format for storing and reading data...
[SECURITY] Fedora 34 Update: getdata-0.11.0-1.fc34
The GetData Project is the reference implementation of the Dirfile Standards, a filesystem-based database format for time-ordered binary data. The Dirfile database format is designed to provide a fast, simple format for storing and reading data...
adi (>=0.4.0, <=0.6.0), adi_screen (>=0.3.0, <=0.7.0) +119 more potentially affected by CVE-2020-35923 via ordered-float (>=0.2.3, <=1.0.2)
ordered-float CARGO version =0.2.3, =0.4.0, =0.3.0, =0.7.5, =0.2.0, =3.1.3, =0.1.1, =0.9.0, =0.0.10, =0.1.2, =0.0.2, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2020-35923 Source advisory: OSV:GHSA-566X-HHRF-QF8M...
PYSEC-2021-584
TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.Map and tf.rawops.OrderedMap operations. The implementation has a check in place to ensure that indices is in...
CVE-2021-37671
TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.Map and tf.rawops.OrderedMap operations. The implementation has a check in place to ensure that indices is in...
PT-2021-21789 · Google · Tensorflow
Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: An attacker can cause undefined behavior via binding a reference to null pointer...
Google TensorFlow缓冲区错误漏洞
A security vulnerability in Google TensorFlow, an end-to-end open source platform for machine learning from Google, can be exploited to cause undefined behavior by binding references to null pointers in the tf.rawops.Map and tf.rawops. OrderedMap operations to cause undefined behavior by binding ...
selinux:secilc-fuzzer: Use-of-uninitialized-value in __cil_ordered_item_insert
Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=4842594079211520 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: secilc-fuzzer Job Type: libfuzzermsanselinux Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
Denial Of Service (DoS)
xen is vulnerable to denial of service DoS. The vulnerability exists through re-ordered reads on the consumer side, causing a NULL pointer dereference...
