Lucene search
+L

11276 matches found

Github Security Blog
Github Security Blog
added 2023/09/05 6:30 a.m.36 views

Crash when processing crafted TIFF files

Disintegration Imaging 1.6.2 allows attackers to cause a panic because of an integer index out of range during a Grayscale call via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequenc...

5.5CVSS7AI score0.00385EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/09/05 6:30 a.m.39 views

GHSA-XGMM-3VVR-6C8J Index out of bounds leading to crash

ZPLGFA 1.1.1 allows attackers to cause a panic because of an integer index out of range during a ConvertToGraphicField call via an image of zero width. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence...

5.5CVSS5.4AI score0.00262EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2023/09/05 5:15 a.m.6 views

CVE-2023-36307

ZPLGFA 1.1.1 allows attackers to cause a panic because of an integer index out of range during a ConvertToGraphicField call via an image of zero width. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence...

5.5CVSS6.1AI score0.00262EPSS
SaveExploits1References2
OSV
OSV
added 2023/09/05 4:15 a.m.5 views

DEBIAN-CVE-2023-36308

disintegration Imaging 1.6.2 allows attackers to cause a panic because of an integer index out of range during a Grayscale call via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequenc...

5.5CVSS5.7AI score0.00385EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2023/09/05 4:15 a.m.26 views

CVE-2023-36308

disintegration Imaging 1.6.2 allows attackers to cause a panic because of an integer index out of range during a Grayscale call via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequenc...

5.5CVSS6.1AI score0.00385EPSS
SaveExploits1References3
OSV
OSV
added 2023/09/05 4:15 a.m.8 views

UBUNTU-CVE-2023-36308

DISPUTED disintegration Imaging 1.6.2 allows attackers to cause a panic because of an integer index out of range during a Grayscale call via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security...

5.5CVSS5.8AI score
SaveExploits0References4
CNNVD
CNNVD
added 2023/09/05 12:00 a.m.11 views

Imaging Input Validation Error Vulnerability

Imaging is a simple Go image processing package from the individual developer Grigory Dryapak. A security vulnerability exists in Imaging version 1.6.2, which stems from a vulnerability that allows an attacker to cause a panic in the scanning functionality of Scanner.go via a crafted TIFF file...

5.5CVSS6.7AI score0.00385EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/09/05 12:00 a.m.7 views

ZPLGFA Input Validation Error Vulnerability

ZPLGFA is a Go package from Simon Waldherr's personal developer. It is used to convert PNG, JPEG and GIF encoded graphic files into ZPL compatible ^GF elements graphic fields. A security vulnerability exists in ZPLGFA version 1.1.1, which stems from allowing an attacker to cause a panic with a...

5.5CVSS6.8AI score0.00262EPSS
SaveExploits1References1
OSV
OSV
added 2023/09/05 12:00 a.m.8 views

CVE-2023-36308

disintegration Imaging 1.6.2 allows attackers to cause a panic because of an integer index out of range during a Grayscale call via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequenc...

5.5AI score
SaveExploits0References6
CVE
CVE
added 2023/09/05 12:00 a.m.314 views

CVE-2023-36308

The CVE-2023-36308 entry concerns disintegration Imaging 1.6.2. Affected component: the scanner.go scan function, specifically the Grayscale path when processing crafted TIFF files. Root cause: an integer index out of range leads to a panic. Impact: the description notes it is unclear whether thi...

5.5CVSS5.3AI score0.00385EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2023/09/05 12:00 a.m.45 views

CVE-2023-36307

CVE-2023-36307 affects ZPLGFA 1.1.1. The root cause is an integer index out of range in ConvertToGraphicField when processing a zero-width image, causing a panic/crash. The description notes unclear security consequences in typical use. Remediation hints from PT-2023-25522 suggest avoiding zero-w...

5.5CVSS5.4AI score0.00262EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/09/05 12:00 a.m.106 views

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6339-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6339-1 advisory. It was discovered that the NTFS file system implementation in the Linux kernel did not properly validate MFT flags in certain situations. An...

9.8CVSS7.1AI score0.03157EPSS
SaveExploits0References9
OSV
OSV
added 2023/08/31 1:15 a.m.8 views

CVE-2023-4163

In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command...

4.4CVSS7.4AI score0.00269EPSS
SaveExploits0References2
NVD
NVD
added 2023/08/31 1:15 a.m.25 views

CVE-2023-4163

In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command...

4.4CVSS4.7AI score0.00269EPSS
SaveExploits0References2
Prion
Prion
added 2023/08/31 1:15 a.m.20 views

Buffer overflow

In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command...

1.4CVSS4.7AI score0.00269EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/08/31 12:04 a.m.33 views

CVE-2023-4163 Possible buffer overflow in portcfgfportbuffers in Brocade Fabric OS

In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command...

4.4CVSS5AI score0.00269EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/08/31 12:04 a.m.4 views

CVE-2023-4163 Possible buffer overflow in portcfgfportbuffers in Brocade Fabric OS

In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command...

4.4CVSS7.1AI score0.00269EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/31 12:00 a.m.9 views

Brocade Fabric OS 安全漏洞

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. A security vulnerability exists in Brocade Fabric OS versions prior to v9.2.0a, which stems from the possibility that a locally authenticated, privileged user could trigger ...

4.4CVSS6.8AI score0.00269EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/08/31 12:00 a.m.28 views

FreeBSD : FreeBSD -- Remote denial of service in IPv6 fragment reassembly (3dabf5b8-47c0-11ee-8e38-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3dabf5b8-47c0-11ee-8e38-002590c1f29c advisory. - A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a...

7.5CVSS7.4AI score0.00645EPSS
SaveExploits0References2
OSV
OSV
added 2023/08/29 5:15 p.m.11 views

CVE-2023-3646

On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload...

7.5CVSS5.8AI score0.00674EPSS
SaveExploits1References1
Rows per page
Query Builder