9945 matches found
CVE-2024-34155 Stack exhaustion in all Parse functions in go/parser
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion...
CVE-2024-34155
Calling any of the Parse functions on Go source code containing deeply nested literals can cause a panic due to stack exhaustion . This vulnerability impacts several packages and components, including cockpit-podman , conmon , container-selinux , buildah , aardvark-dns , containers-common , fuse-...
CVE-2024-34155
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion...
CVE-2024-34158
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
GO-2024-3105 Stack exhaustion in all Parse functions in go/parser
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion...
GO-2024-3107 Stack exhaustion in Parse in go/build/constraint
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
Uncontrolled Recursion
Overview std/go/build/constraint is a Go standard library package std/go/build/constraint Affected versions of this package are vulnerable to Uncontrolled Recursion. Go Vulnerability Report: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stac...
PT-2024-7588
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to a buffer overflow vulnerability in the Linux kernel's Kirin PCIe driver, specifically in the kirin pcie parse port function. This vulnerability may allow an attacker to...
golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm
A flaw was discovered in Go's net/http standard library package. When parsing a multipart form either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile, limits on the total size of the parsed form were not applied to the...
SUSE CVE-2024-45508
HTMLDOC before 1.9.19 has an out-of-bounds write in parseparagraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node...
UBUNTU-CVE-2024-45508
HTMLDOC before 1.9.19 has an out-of-bounds write in parseparagraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node...
HTMLDOC security vulnerabilities
HTMLDOC is an open source program by Michael R Sweet, an individual developer, that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript, and PDF format files. A security vulnerability exists in HTMLDOC versions prior to 1.9.19, which stems from an out-of-bounds write in the...
IBM Lotus Notes Sametime Room Name Bruteforce
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'enumerable' class MetasploitModule 'IBM Lotus Notes Sametime Room Name Bruteforce', 'Description' = %q This module bruteforces Sametime meeting room names via t...
DEBIAN-CVE-2024-45490
An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer...
UBUNTU-CVE-2024-45490
An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer...
golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm
A flaw was discovered in Go's net/http standard library package. When parsing a multipart form either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile, limits on the total size of the parsed form were not applied to the...
PT-2024-32759
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A potential RCU dereference issue was identified in the wilc parse join bss param function, where the TSF field of the ies structure is accessed after the RCU read-side critical section is...
PT-2024-6107
Name of the Vulnerable Software and Affected Versions Go versions prior to 1.23.1 and 1.22.1 Description The issue is related to the Parse function in the Go programming language, which can cause a panic due to stack exhaustion when dealing with deeply nested literals in Go source code. This can ...
orc: Stack-based buffer overflow vulnerability in ORC
Stack-based buffer overflow vulnerability exists in orcparse.c of ORC. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI buil...
PT-2024-40568 · Git +1 · Glslang
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including glslang::TInfoSinkBase::location,...