11276 matches found
GO-2023-1941 Panic when handling invalid request in MITM mode in github.com/elazarl/goproxy
An invalid request can cause a panic when running in MITM mode...
An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the print_panic function in repo_checkout_filter.rs.
...
GO-2023-1923 Panic when handling invalid HAProxy PROXY v2 request in github.com/mastercactapus/proxyprotocol
Panic when handling invalid HAProxy PROXY v2 request in github.com/mastercactapus/proxyprotocol...
SUSE CVE-2022-47085
An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the printpanic function in repocheckoutfilter.rs...
AZL-35219 CVE-2022-47085 affecting package rpm-ostree for versions less than 2022.1-7
An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the printpanic function in repocheckoutfilter.rs...
CVE-2022-47085
An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the printpanic function in repocheckoutfilter.rs...
AZL-27654 CVE-2022-47085 affecting package rpm-ostree for versions less than 2022.1-5
An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the printpanic function in repocheckoutfilter.rs...
libostree 安全漏洞
libostree is an operating system and container binary deployment and upgrade tool open-sourced by the OSTree Project. A security vulnerability exists in versions of libostree prior to 2022.7 that originated from allowing an attacker to cause a denial of service via the printpanic function in...
PT-2023-15158 · Ostree · Ostree
Name of the Vulnerable Software and Affected Versions: ostree versions prior to 2022.7 ostree versions prior to 0.17.1 Description: An issue in ostree allows attackers to cause a denial of service or other unspecified impacts via the print panic function in repo checkout filter.rs. Recommendation...
Denial Of Service (DoS)
github.com/malfunkt/iprange is vulnerable to Denial of Service DoS attacks. The vulnerability exists in Parse function of y.go, which allows a malicious user to parse a range with a mask larger than 32 bits which causes a panic, resulting in an application crash...
GHSA-F99H-W337-MV56 iprange may panic when parsing ranges with invalid masks
Parsing a range with a mask larger than 32 bits causes a panic...
iprange may panic when parsing ranges with invalid masks
Parsing a range with a mask larger than 32 bits causes a panic...
golang: crypto/elliptic: panic caused by oversized scalar
An integer overflow flaw was found in Golang's crypto/elliptic library. This flaw allows an attacker to use a crafted scaler input longer than 32 bytes, causing P256.ScalarMult or P256.ScalarBaseMult to panic, leading to a loss of availability...
golang: crypto/elliptic: panic caused by oversized scalar
An integer overflow flaw was found in Golang's crypto/elliptic library. This flaw allows an attacker to use a crafted scaler input longer than 32 bytes, causing P256.ScalarMult or P256.ScalarBaseMult to panic, leading to a loss of availability...
A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.
...
golang: runtime: unexpected behavior of setuid/setgid binaries
On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state or assuming the status of standard I/O file descriptors. If a setuid/setgid binary is executed with standard I/...
Samsung Mobile Devices Improper Input Validation Vulnerability
Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic...
CVE-2023-29403
On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state or assuming the status of standard I/O file descriptors. If a setuid/setgid binary is executed with standard I/...
CVE-2023-3212
A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a...
CVE-2023-3212
A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a...