9011 matches found
SUSE CVE-2024-23948
Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the...
SUSE CVE-2024-23950
Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the...
json-path: stack-based buffer overflow in Criteria.parse method
A stack overflow vulnerability was found in the Criteria.parse method in json-path. This issue occurs due to an uncontrolled recursion caused by specially crafted input, leading to a stack overflow. This vulnerability has the potential to trigger a crash, resulting in a denial of service...
DEBIAN-CVE-2024-36953
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgicv2parseattr vgicv2parseattr is responsible for finding the vCPU that matches the user-provided CPUID, which of course may not be valid. If the ID is invalid, kvmgetvcpubyid...
Linux kernel 安全漏洞
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which stems from a flaw in the KVM:arm64:vgic-v2 module vgicv2parseattr...
PT-2024-40416 · Libxml2 +2 · Libxml2 +2
Name of the Vulnerable Software and Affected Versions: Zend Framework 2 affected versions not specified Description: The issue concerns XML Entity Expansion XEE attacks, which can lead to Denial Of Service attacks against a host's RAM. This occurs because there is no current method of disabling...
threetenbp:ThreetenbpFuzzer: Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse
Project: https://github.com/ThreeTen/threetenbp.git Detailed Report: https://oss-fuzz.com/testcase?key=5990260562526208 Project: threetenbp Fuzzing Engine: libFuzzer Fuzz Target: ThreetenbpFuzzer Job Type: libfuzzerasanthreetenbp Platform Id: linux Crash Type: Security exception Crash Address:...
kernel: cifs: fix underflow in parse_server_interfaces()
In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parseserverinterfaces In this loop, we step through the buffer and after each item we check if the sizeleft is greater than the minimum size we need. However, the problem is that "bytesleft" is type ssizet...
kernel: cifs: fix underflow in parse_server_interfaces()
In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parseserverinterfaces In this loop, we step through the buffer and after each item we check if the sizeleft is greater than the minimum size we need. However, the problem is that "bytesleft" is type ssizet...
UBUNTU-CVE-2024-23948
Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the...
UBUNTU-CVE-2024-23951
Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the...
PT-2024-20197
Name of the Vulnerable Software and Affected Versions libigl version 2.5.0 Description The issue is related to improper array index validation vulnerabilities in the readMSH functionality. A specially crafted .msh file can lead to an out-of-bounds write. This concerns the igl::MshLoader::parse...
PT-2024-20195
Name of the Vulnerable Software and Affected Versions libigl version 2.5.0 Description The issue arises from multiple improper array index validation vulnerabilities in the readMSH functionality. A specially crafted .msh file can lead to an out-of-bounds write. This can be triggered by an attacke...
PT-2024-20194
Name of the Vulnerable Software and Affected Versions libigl version 2.5.0 Description The issue is related to improper array index validation vulnerabilities in the readMSH functionality. A specially crafted .msh file can lead to an out-of-bounds write. This concerns the igl::MshLoader::parse...
PT-2024-20198
Name of the Vulnerable Software and Affected Versions libigl version 2.5.0 Description The issue arises from multiple improper array index validation vulnerabilities in the readMSH functionality. A specially crafted .msh file can lead to an out-of-bounds write. This can be triggered by an attacke...
PT-2024-20193
Name of the Vulnerable Software and Affected Versions libigl version 2.5.0 Description The issue arises from multiple improper array index validation vulnerabilities in the readMSH functionality. A specially crafted .msh file can lead to an out-of-bounds write. This can be triggered by an attacke...
PT-2024-5410
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The issue is related to the function parse btf field in the Linux kernel's tracing subsystem. The problem arises from the incorrect checking of the return code of the btf find struct member...
dotnet: stack buffer overrun in Double Parse
A remote code execution vulnerability exists in .NET 7.0 and .NET 8.0. A stack buffer overrun occurs in the .NET Double Parse routine...
golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm
A flaw was discovered in Go's net/http standard library package. When parsing a multipart form either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile, limits on the total size of the parsed form were not applied to the...